EUVD-2026-73191
GHSA-rj7v-5mpx-f6rq
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Local access with existing credentials required (AV:L/PR:L); AC:H reflects inherent timing sensitivity of race condition exploitation; full SYSTEM compromise achievable on success (C:H/I:H/A:H); no scope change beyond the vulnerable process.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in Windows Connected User Experiences and Telemetry (DiagTrack) allows an authenticated local user to elevate to SYSTEM-level privileges by winning a race condition against the SYSTEM-privileged service. The flaw spans Windows 10 21H2/22H2, Windows 11 23H2 through 26H1, Windows Server 2022, and Windows Server 2025, all remediated in the associated Patch Tuesday release. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing authenticated local user account (CVSS PR:L) - the vulnerability is not remotely exploitable without prior local access. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.0 score (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) is well-calibrated for this class of vulnerability: AC:H correctly reflects that race conditions require timing-sensitive repeated attempts and are not trivially automatable at scale, while C:H/I:H/A:H accurately captures full SYSTEM-level impact once the race is won. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update for CVE-2026-68824 via Windows Update, WSUS, or Microsoft Update Catalog. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Audit inventory of affected systems (Windows 10 21H2/22H2, Windows 11 23H2-26H1, Windows Server 2022/2025) and prioritize servers, VDI hosts, and multi-user endpoints for immediate patching. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-362 – Race Condition
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today