CVE WatchSep 8, 2026

CVE-2026-69710

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker t

CVSS

7.5

High

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Sep 8, 2026 · Last modified: Sep 8, 2026 · CWE-362

EPSS · 30d

Not enough EPSS history yet.

Technical description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69710

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-778947.0 HIG

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.4h CVE-2026-730057.0 HIG

—

———Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.4h CVE-2026-705826.4 MED

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.4h CVE-2026-700915.9 MED

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.4h CVE-2026-698278.1 HIG

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.4h CVE-2026-697997.8 HIG

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.4h