ZDI-26-184 HIGH 7.8 Published Mar 10, 2026

Microsoft Windows NDIS Driver Use-After-Free Local Privilege Escalation Vulnerability

Microsoft

This is a privilege escalation vulnerability affecting Microsoft Windows (CVE-2026-24289) with a CVSS score of 7.8, allowing local attackers to gain elevated system privileges if they can first execute low-privileged code on a target machine. The vulnerability poses a significant risk because it enables attackers already on a system to escalate their access from limited to administrative-level permissions. Security teams should prioritize patching Windows systems and implementing controls to restrict code execution and limit local access to trusted users only.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy