CVE-2026-69874
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
An untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could gain administrative privileges, potentially leading to full system control.
Recommendation
Install security updates and restrict local system access to trusted users only.
Other vulnerabilities in Windows ALPC
See all- CVE-2026-85880HighActively exploited
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
- CVE-2023-21674HighActively exploited
An Elevation of Privilege vulnerability in Windows Advanced Local Procedure Call (ALPC). It could allow an attacker to escalate privileges on a Windows system.
- CVE-2026-69834High
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
- CVE-2022-41100High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
- CVE-2022-41093High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
- CVE-2022-41045High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
Original NVD description (English source)
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.