CVE-2026-58527

HighCVSS 7.0/10Last modified Jul 22, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published: Jul 14, 2026
Last modified: Jul 22, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-585284.6Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical CVE-2026-585297.1Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.CVE-2026-58539.8A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setIpv6L CVE-2026-585307.8Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.CVE-2026-585317.5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to CVE-2026-585327.8Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-585337.5Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.CVE-2026-585347.8Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.CVE-2026-585357.5Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.CVE-2026-585367.8Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2026-585377.8Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges locally.CVE-2026-585387.8Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.