CVE-2026-88096

HighCVSS 7.0

Published: 13/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

4th percentile - higher than 4% of all known CVEs

Summary

Race condition vulnerability in the Windows DCOM Server due to improper synchronization of a shared resource. An authorized attacker can elevate privileges locally.

Risk Assessment

An attacker with valid credentials can exploit the race condition to escalate local privileges, potentially leading to system compromise.

Recommendation

Apply the latest Microsoft security updates for Windows and restrict local access to trusted users.

Other vulnerabilities in Windows DCOM Server

CVE-2026-69284High
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS