CVE-2026-56177
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A use-after-free vulnerability in Windows Server allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply the latest security updates for Windows Server.
Other vulnerabilities in Windows Server
See all- CVE-2026-56188Critical
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.
- CVE-2026-50311High
Improper access control vulnerability in Windows Server. Allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS