Windows StateRepository API vulnerabilities

4 known CVE vulnerabilities in Windows StateRepository API, translated and rated.

CVE-2026-85911High
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2026-70218High
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2026-102216High
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2026-49170High
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS