CVE-2026-71347

MediumCVSS 6.4

Published: 13/10/2026(UTC)Updated: 13/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.

Risk Assessment

An authorized attacker could elevate privileges locally, potentially leading to full system compromise.

Recommendation

Install the security update from Microsoft for Windows Security Center.

Other vulnerabilities in Windows Security Center

See all

CVE-2026-70212High
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.
CVE-2026-77899High
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS