EUVD-2026-73222
GHSA-r566-4rrr-j7qq
Severity by source
AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Network-reachable registry RPC requires low-privilege auth and user interaction; AC:H reflects heap-grooming difficulty; successful privilege escalation yields full C/I/A impact.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.
AnalysisAI
Privilege escalation via double-free memory corruption in the Windows Registry subsystem allows a low-privileged, network-connected authenticated attacker - with required user interaction - to elevate to higher privilege levels, potentially achieving full system compromise (C:H/I:H/A:H). The vulnerability spans virtually every supported Windows release from Server 2012 R2 through Windows 11 26H1 and Server 2025, representing an enormous aggregate attack surface. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privilege network account with the ability to reach the Windows Remote Registry RPC service (typically TCP port 445 / named pipe \\pipe\\winreg) on the target host. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world exploitability is materially constrained by three factors working in concert: AC:H reflects the inherent difficulty of reliably weaponizing a double-free primitive (heap layout control, timing, and grooming are required); PR:L demands valid credentials, ruling out anonymous internet-facing exploitation; and UI:R introduces a dependency on a local user or process action to trigger the vulnerable code path. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply Microsoft's Patch Tuesday updates via Windows Update or WSUS; specific patched build thresholds are: Windows Server 2016/Windows 10 1607 to ≥10.0.14393.9512; Windows 10 1809/Server 2019 to ≥10.0.17763.9245; Windows Server 2022 to ≥10.0.20348.5622; Windows 10 21H2 to ≥10.0.19044.7725; Windows 10 22H2 to ≥10.0.19045.7725; Windows 11 23H2 to ≥10.0.22631.7582; Windows 11 24H2 and 25H2 to ≥10.0.26100.9445; Windows 11 26H1 to ≥10.0.28000.2954; Windows Server 2025 to ≥10.0.26100.33438; Windows Server 2012 to ≥6.2.9200.26349; Windows Server 2012 R2 to ≥6.3.9600.23397. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, create a complete inventory of Windows systems by version (Server 2012 R2 through Server 2025, Windows 11 26H1) and prioritize domain-joined and critical-tier systems for immediate patching. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-415 – Double Free
View allShare
External POC / Exploit Code
Leaving vuln.today