CVE-2026-69931
HighCVSS 7.0Summary
Race condition due to concurrent execution using a shared resource with improper synchronization in Windows Storage. An authorized attacker can exploit this flaw to elevate privileges locally.
Risk Assessment
The flaw enables local privilege escalation, potentially leading to system compromise by an attacker with valid credentials.
Recommendation
Immediately install Microsoft patches for Windows Storage and limit local privileges to the minimum necessary.
Other vulnerabilities in Windows Storage
See all- CVE-2026-83911High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-69935High
Use after free vulnerability in Windows Storage. An authorized attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-69856High
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-69766High
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-69763High
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2025-21391HighActively exploited
Windows Storage Elevation of Privilege Vulnerability.
- CVE-2026-78516Medium
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
- CVE-2026-69328High
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-62695High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-61359High
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS