CVE Watch10 nov 2026

CVE-2026-96075

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized att

CVSS

7.0

Alto

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 10 nov 2026 · Última mod.: 10 nov 2026 · CWE-362

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate privileges locally.

Referencias oficiales

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96075

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-961717.0 ALT

—

——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.4h CVE-2026-961587.0 ALT

—

——0Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.4h CVE-2026-960887.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.4h CVE-2026-960484.7 MED

—

——0Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.4h CVE-2026-960197.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.4h CVE-2026-960077.0 ALT

—

——0Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.4h