CVE-2026-56177

HighCVSS 7.8/10Last modified Sep 17, 2026

Description

Use after free in Windows Server allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-561787.0Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locCVE-2026-561798.3Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent neCVE-2026-56185.6A vulnerability was detected in kalcaddle kodbox up to 1.64. This affects an unknown function of the component shareMake/shareCheck. PerformCVE-2026-561818.3Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent neCVE-2026-561827.8Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-561837.0Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.CVE-2026-561845.5Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.CVE-2026-561856.5Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.CVE-2026-561866.5Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.CVE-2026-561877.8Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.CVE-2026-561888.1Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unautCVE-2026-561898.4Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
CVE-2026-56177: High severity, CVSS 7.8 | Vulnix