CVE-2026-61355
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the buffer overflow to execute code with elevated privileges, potentially leading to system takeover.
Recommendation
Apply security updates. Restrict access to the service to trusted processes only.
Other vulnerabilities in Windows Sensor Data Service
See all- CVE-2026-83639High
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-58619High
Use-After-Free vulnerability in Windows Sensor Data Service. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-50367High
Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS