CVE-2026-57968
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A buffer over-read vulnerability in Windows Subsystem for Linux (WSL) allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit this flaw to gain elevated privileges, potentially leading to full system compromise.
Recommendation
It is recommended to apply security patches provided by Microsoft for the WSL subsystem immediately.
Other vulnerabilities in Windows Subsystem for Linux
See all- CVE-2017-8622High
The vulnerability in Windows Subsystem for Linux in Windows 10 1703 allows for elevation of privilege when it fails to properly handle NT pipes handles.
- CVE-2026-57973Medium
A TOCTOU race condition in Windows Subsystem for Linux (WSL) allows an authorized attacker to perform local tampering. The vulnerability stems from a race between resource check and use.
- CVE-2021-36966High
Vulnerability in Windows Subsystem for Linux allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2020-1075Medium
Information disclosure vulnerability in Windows Subsystem for Linux due to improper handling of objects in memory. An attacker could obtain information to further compromise the user's system.
Original NVD description (English source)
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.