CVE Catalog

CVE-2026-61355

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.32%

24th percentile - higher than 24% of all known CVEs

Summary

A heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker could exploit the buffer overflow to execute code with elevated privileges, potentially leading to system takeover.

Recommendation

Apply security updates. Restrict access to the service to trusted processes only.

Original NVD description (English source)

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS