CVE-2026-24295

High CVSS: 7.0

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Vendor

Microsoft

Product

Windows 10 1607

CWE

CWE-362

Yayın Tarihi

2026-03-10 18:18:20

Güncelleme

2026-03-13 18:47:27

Source Identifier

secure@microsoft.com

KEV Date Added

Kategoriler

CWE-362 Windows 10 1607 HIGH Microsoft 2026

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24295

Benzer Kayıtlar

Critical

CVE-2026-33107

Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a netw…

Critical

CVE-2026-33105

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over…

Critical

CVE-2026-32213

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Critical

CVE-2026-32211

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information…

High

CVE-2026-32173

Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.

Critical

CVE-2026-26135

Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to ele…