CVE-2026-96932

HighCVSS 7.0

Published: 13/10/2026(UTC)Updated: 13/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with local access could exploit the race condition to elevate privileges, potentially leading to full system compromise.

Recommendation

Install the latest security updates from Microsoft.

Other vulnerabilities in Windows Embedded Mode Service

See all

CVE-2026-85914High
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69430High
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS