CVE-2026-32163

HighCVSS 7.8/10Last modified Oct 14, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-362 CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Apr 14, 2026
Last modified: Oct 14, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-321647.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authori CVE-2026-321657.8Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally.CVE-2026-321677.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate CVE-2026-321687.8Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.CVE-2026-321699.8Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.CVE-2026-32176.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider all CVE-2026-321706.7Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.CVE-2026-321718.8Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.CVE-2026-321728.0Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.CVE-2026-321737.5Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.CVE-2026-321748.8Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.CVE-2026-321754.3A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vuln