CVE-2026-70097
MediumCVSS 5.6Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
Risk Assessment
An attacker with local access could perform spoofing attacks, potentially leading to impersonation of other processes or users.
Recommendation
Install Windows security updates that fix the race condition in VBS Enclave.
Other vulnerabilities in Windows Virtualization-Based Security (VBS) Enclave
See all- CVE-2026-88074High
Integer overflow or wraparound vulnerability in the Windows Virtualization-Based Security (VBS) Enclave. An authorized attacker can elevate privileges locally.
- CVE-2026-102211High
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-23670Medium
An untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
- CVE-2026-20935Medium
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
- CVE-2026-20876Medium
A heap-based buffer overflow vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-20819Medium
An untrusted pointer dereference vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
- CVE-2025-53717High
A vulnerability in Windows Virtualization-Based Security (VBS) Enclave involves reliance on untrusted inputs in a security decision. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS