CVE Watch8 sept 2026

CVE-2026-69710

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker t

CVSS

7.5

Alto

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 8 sept 2026 · Última mod.: 8 sept 2026 · CWE-362

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.

Referencias oficiales

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69710

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-778947.0 ALT

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.5h CVE-2026-730057.0 ALT

—

———Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.5h CVE-2026-705826.4 MED

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.5h CVE-2026-700915.9 MED

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.5h CVE-2026-698278.1 ALT

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.5h CVE-2026-697997.8 ALT

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.5h