What is the CVSS score of CVE-2026-23667?

CVE-2026-23667 has a CVSS 3.1 base score of 7.0 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Windows 10 1809 are affected by CVE-2026-23667?

CVE-2026-23667 is a privilege escalation vulnerability in Broadcast DVR that could allow authorized users to gain elevated system access on affected systems.. A patch is available.

How to fix or mitigate CVE-2026-23667?

Within 24 hours: Identify all systems running Broadcast DVR and assess which are critical to operations; restrict access to the application to only essential personnel. Within 7 days: Implement network segmentation to isolate affected Broadcast DVR systems and enable enhanced monitoring for suspicious privilege escalation activity. Within 30 days: Develop and execute a migration or replacement plan for Broadcast DVR, or apply vendor patch immediately upon availability.

Windows 10 1809 CVE-2026-23667

HIGH

Use After Free (CWE-416)

2026-03-10 secure@microsoft.com

Use After Free Windows 10 1809 Windows 11 26h1 Windows 11 24h2 Windows 11 25h2 Windows 10 22h2 Windows 11 23h2 Windows 10 21h2 Microsoft

7.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.0 HIGH

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:18 nvd

HIGH 7.0

DescriptionCVE.org

Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.

AnalysisAI

Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally. [CVSS 7.0 HIGH]

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Gain local system access

Exploit

Exploit use-after-free in Broadcast DVR memory handling

Execution

Trigger privilege escalation

Impact

Execute code with elevated privileges

Access

Gain local system access

Exploit

Exploit use-after-free in Broadcast DVR memory handling

Execution

Trigger privilege escalation

Impact

Execute code with elevated privileges

Vulnerability AssessmentAI

Exploitation	Local system access with unprivileged user account. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	CVSS 7.0 (HIGH). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker could exploit this vulnerability to compromise the affected system.
Remediation	Monitor vendor advisories for a patch. Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours: Identify all systems running Broadcast DVR and assess which are critical to operations; restrict access to the application to only essential personnel. …

Threat intelligence, references, and detailed analysis are available after sign-in.

CVE-2026-23667 vulnerability details – vuln.today

Back

Windows 10 1809 CVE-2026-23667

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Unlock full vulnerability intelligence

Attack ChainAIDerived

Vulnerability AssessmentAI

Recommended ActionAI

Share

External POC / Exploit Code