CVE Watch10 de nov. de 2026

CVE-2026-105511

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet

CVSS

7.0

Alta

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-362

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet (PPPoE) allows an authorized attacker to elevate privileges locally.

Referências oficiais

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105511

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-961717.0 ALT

—

——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.3h CVE-2026-961587.0 ALT

—

——0Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.3h CVE-2026-960887.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.3h CVE-2026-960757.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate privileges locally.3h CVE-2026-960484.7 MÉD

—

——0Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.3h CVE-2026-960197.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.3h