CVE-2026-68837
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A use-after-free vulnerability exists in Windows File History Service. This allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could exploit this to gain elevated privileges, potentially leading to system compromise or data theft.
Recommendation
Apply the latest Windows security updates that address this vulnerability.
Other vulnerabilities in Windows File History Service
See all- CVE-2026-72947Medium
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-71340High
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-57091High
Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.
- CVE-2021-34455High
Elevation of privilege vulnerability in Windows File History Service. An attacker could exploit it to gain elevated privileges.
Original NVD description (English source)
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

