CVE Catalog

CVE-2026-59126

HighCVSS 7.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.19%

9th percentile - higher than 9% of all known CVEs

Summary

A vulnerability in Windows Event Logging Service is due to a race condition when sharing resources, allowing an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker could exploit the race condition to gain elevated privileges, potentially leading to system takeover.

Recommendation

Install Windows security updates. Restrict access to the event logging service to trusted users only.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS