CVE WatchNov 10, 2026

CVE-2026-105511

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet

CVSS

7.0

High

EPSS

—

KEV

—

Exploit Today

0-100

Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-362

EPSS · 30d

Not enough EPSS history yet.

Technical description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet (PPPoE) allows an authorized attacker to elevate privileges locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105511

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-961717.0 HIG

—

——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.3h CVE-2026-961587.0 HIG

—

——0Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.3h CVE-2026-960887.0 HIG

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.3h CVE-2026-960757.0 HIG

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate privileges locally.3h CVE-2026-960484.7 MED

—

——0Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.3h CVE-2026-960197.0 HIG

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.3h