CVE Catalog
CVE-2026-78457
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.26%
17th percentile - higher than 17% of all known CVEs
Summary
A use after free vulnerability in the Windows Security App allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access can exploit this vulnerability to gain higher privileges on the system, potentially leading to full device compromise.
Recommendation
Apply Microsoft security updates for the Windows Security App that fix CVE-2026-78457.
Other vulnerabilities in Windows Security App
Original NVD description (English source)
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS