CVE-2026-65778
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply the latest security updates from Microsoft for Windows Autopilot.
Other vulnerabilities in Windows Autopilot
See all- CVE-2026-96215High
A race condition vulnerability in Windows Autopilot arises from improper synchronization when accessing a shared resource. An authenticated attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-73004Medium
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
- CVE-2026-65783High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65782High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65781High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65780High
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65779High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS