EUVD-2026-22556
CVSS VectorNVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in Windows User Interface Core across Windows 10, 11, and Server 2016-2025 allows low-privileged authenticated users to gain elevated system access via a race condition vulnerability. Attack complexity is high (AC:H), requiring precise timing exploitation of shared resource synchronization flaws. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all Windows 10, 11, and Server 2016-2025 systems in your environment and assess patch deployment capability. Within 7 days: Deploy vendor-released patches to all affected systems, prioritizing servers and workstations with administrative or sensitive data access. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today