CVE-2026-65782
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could gain higher privileges, potentially leading to privilege escalation and system compromise.
Recommendation
Install security updates for Windows Autopilot from Microsoft.
Other vulnerabilities in Windows Autopilot
See all- CVE-2026-96215High
A race condition vulnerability in Windows Autopilot arises from improper synchronization when accessing a shared resource. An authenticated attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-73004Medium
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
- CVE-2026-65783High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65781High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65780High
Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65779High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-65778High
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS