CVSS VectorNVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in Windows Server Update Service (WSUS) on Windows 11 version 26H1 allows low-privileged authenticated users to gain SYSTEM-level access via use-after-free memory corruption. Exploitation requires local access and high attack complexity (CVSS AC:H), indicating timing-dependent or race condition triggers. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify and inventory all Windows 11 version 26H1 systems running WSUS components. Within 7 days: Apply Microsoft patch version 10.0.28000.1836 to affected WSUS installations and validate patch deployment via Microsoft Update or WSUS administrator console. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today
EUVD-2026-22612
GHSA-3hp2-fjxj-6wj4