CVE-2026-77899
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker could elevate privileges, potentially gaining full control of the system and bypassing security controls.
Recommendation
Apply Windows security updates.
Other vulnerabilities in Windows Security Center
See all- CVE-2026-71347Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
- CVE-2026-70212High
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS