CVE-2026-65780
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit the double free to gain elevated privileges, potentially leading to full system compromise.
Recommendation
Install the latest security patches for Windows Autopilot.
Other vulnerabilities in Windows Autopilot
See all- CVE-2026-96215High
A race condition vulnerability in Windows Autopilot arises from improper synchronization when accessing a shared resource. An authenticated attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-73004Medium
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
- CVE-2026-65783High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65782High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65781High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65779High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65778High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS