CVE-2026-26168

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-362CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Apr 14, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-261696.1Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.CVE-2026-26178.8A vulnerability was found in Beetel 777VR1 up to 01.00.09. This affects an unknown function of the component Telnet Service/SSH Service. TheCVE-2026-261707.8Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.CVE-2026-261717.5Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-261727.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorizCVE-2026-261737.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSockCVE-2026-261747.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allows an authoCVE-2026-261754.6Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack.CVE-2026-261767.8Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally.CVE-2026-261777.0Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.CVE-2026-261788.8Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.CVE-2026-261797.8Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-26168: High severity, CVSS 7.8 | Vulnix