CVE-2026-69324
HighCVSS 7.8Summary
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user can elevate privileges, potentially leading to unauthorized access to critical system resources.
Recommendation
Apply security updates for Windows Performance Monitor.
Other vulnerabilities in Windows Performance Monitor
See all- CVE-2026-42981High
An integer underflow vulnerability in Windows Performance Monitor allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-42974High
An integer overflow vulnerability in Windows Performance Monitor allows an unauthorized attacker to execute code remotely over a network.
Original NVD description (English source)
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.