CVE-2026-66799
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows Key Guard
See all- CVE-2026-50378High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally.
- CVE-2026-50303Medium
Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS