CVE-2026-97812
HighCVSS 7.0Summary
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with user privileges could gain elevated privileges, potentially leading to system compromise.
Recommendation
Apply the latest security updates from the vendor.
Other vulnerabilities in Windows Update Orchestrator Service
See all- CVE-2026-83930High
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83886High
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83793High
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS