CVE Catalog

CVE-2026-45600

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.15%

35th percentile - higher than 35% of all known CVEs

Summary

In Windows, a vulnerability in kernel-mode drivers allows access to resources using an incompatible type ('type confusion'). This enables an authorized attacker to elevate privileges locally.

Risk Assessment

This vulnerability could lead to unauthorized access to system resources, posing a significant threat to the security of the operating system.

Recommendation

It is recommended to update the operating system to the latest version to patch this vulnerability and to monitor system logs for potential exploitation attempts.

Original NVD description (English source)

Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS