CVE-2026-56643

HighCVSS 7.8/10Last modified Jul 22, 2026

Description

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jul 14, 2026
Last modified
Jul 22, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-566447.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-566458.8Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.CVE-2026-566466.5Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoCVE-2026-566478.8Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a neCVE-2026-566487.5Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a CVE-2026-566498.1Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthoCVE-2026-56657.3A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an unknown functionalitCVE-2026-566507.8Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.CVE-2026-566512.0Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file withoutCVE-2026-566524.6Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell CVE-2026-566549.8Privilege Escalation via Access Token Scope Escalation in APICVE-2026-566576.2Gitea SSH Key Parser Denial of Service
CVE-2026-56643: High severity, CVSS 7.8 | Vulnix