CVE-2026-62892
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit this vulnerability to escalate privileges and take control of the system.
Recommendation
Apply security updates provided by the Windows vendor.
Other vulnerabilities in Capability Access Management Service
See all- CVE-2026-20830High
A race condition vulnerability in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
- CVE-2026-21221High
A race condition exists in the Capability Access Management Service (camsvc) due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

