CVE-2026-69324
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user can elevate privileges, potentially leading to unauthorized access to critical system resources.
Recommendation
Apply security updates for Windows Performance Monitor.
Other vulnerabilities in Windows Performance Monitor
See all- CVE-2026-85359High
Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
- CVE-2026-85333Medium
A race condition vulnerability (concurrent execution using a shared resource with improper synchronization) in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
- CVE-2026-42981High
An integer underflow vulnerability in Windows Performance Monitor allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-42974High
An integer overflow vulnerability in Windows Performance Monitor allows an unauthorized attacker to execute code remotely over a network.
Original NVD description (English source)
Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS