CVE-2026-58602
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
In Windows Kernel Mode Driver, a use-after-free vulnerability allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user can gain kernel-level privileges, potentially leading to full system compromise.
Recommendation
It is recommended to apply the appropriate security patch from Microsoft.
Other vulnerabilities in Windows Kernel Mode Driver
See all- CVE-2024-35250HighActively exploited
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. This flaw can be exploited by a local attacker to gain system-level privileges.
- CVE-2024-30084High
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. An attacker who successfully exploits it can gain SYSTEM privileges.
- CVE-2024-38256Medium
A vulnerability in Windows Kernel-Mode Driver allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
- CVE-2020-1143High
Elevation of privilege vulnerability in Windows kernel-mode driver. An attacker logged on to the system can run a specially crafted application to execute arbitrary code in kernel mode, potentially installing programs, modifying data, or creating accounts with full user rights.
Original NVD description (English source)
Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.