CVE Watch10 de nov. de 2026

CVE-2026-105017

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Volume Shadow Copy allows an authoriz

CVSS

7.0

Alta

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-362

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Volume Shadow Copy allows an authorized attacker to elevate privileges locally.

Referências oficiais

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105017

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-961717.0 ALT

—

——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.3h CVE-2026-961587.0 ALT

—

——0Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.3h CVE-2026-960887.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.3h CVE-2026-960757.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate privileges locally.3h CVE-2026-960484.7 MÉD

—

——0Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.3h CVE-2026-960197.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.3h