CVE-2026-61939
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Use after free in Winlogon allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit the flaw to elevate privileges, potentially leading to system takeover.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Winlogon
See all- CVE-2026-87699High
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
- CVE-2026-25187High
Improper link resolution before file access in Winlogon allows an authorized attacker to elevate privileges locally.
- CVE-2026-42989High
Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.
- CVE-2024-30067Medium
A vulnerability in Winlogon allows elevation of privilege in Windows systems. An attacker could exploit this flaw to gain higher privileges on the device.
- CVE-2024-30066Medium
A vulnerability in the Winlogon component of Windows allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.
Original NVD description (English source)
Use after free in Winlogon allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS