CVE-2026-68824

HighCVSS 7.0/10Last modified Sep 17, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362CWE-416

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 21H2>= 10.0.19044.0, < 10.0.19044.7725
MicrosoftWindows 10 Version 22H2>= 10.0.19045.0, < 10.0.19045.7725
MicrosoftWindows 11 version 23H2>= 10.0.22631.0, < 10.0.22631.7582
MicrosoftWindows 11 Version 23H2>= 10.0.22631.0, < 10.0.22631.7582
MicrosoftWindows 11 Version 24H2>= 10.0.26100.0, < 10.0.26100.9445
MicrosoftWindows 11 Version 25H2>= 10.0.26200.0, < 10.0.26200.9445
MicrosoftWindows 11 version 26H1>= 10.0.28000.0, < 10.0.28000.2954
MicrosoftWindows Server 2022>= 10.0.20348.0, < 10.0.20348.5622
MicrosoftWindows Server 2025>= 10.0.26100.0, < 10.0.26100.33438
MicrosoftWindows Server 2025 (Server Core installation)>= 10.0.26100.0, < 10.0.26100.33438

References

Timeline

Published
Sep 8, 2026
Last modified
Sep 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-688257.0Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2026-688278.0Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.CVE-2026-688288.8Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-68834.3GitLab has remediated an issue in GitLab EE affecting all versions from 15.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 tCVE-2026-688305.5Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized atCVE-2026-688315.5Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose informatiCVE-2026-688327.8Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-688336.8Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.CVE-2026-688348.0Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.CVE-2026-688357.1Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.CVE-2026-688367.8Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.CVE-2026-688377.0Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.
CVE-2026-68824: High severity, CVSS 7.0 | Vulnix