CVE-2026-105566
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker
CVSS
7.0
Alto
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 nov 2026 · Última mod.: 10 nov 2026 · CWE-362 · CWE-415
Sin historial EPSS suficiente todavía.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-969697.0 ALT—
——0Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.4hCVE-2026-961717.0 ALT—
——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.4hCVE-2026-961587.0 ALT—
——0Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.4hCVE-2026-961158.0 ALT—
——0Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.4hCVE-2026-960887.0 ALT—
——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.4hCVE-2026-960757.0 ALT—
——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate privileges locally.4h