7.0Yüksek

CVE-2026-108134Windows Autopilot Elevation of Privilege Vulnerability

Microsoft Windows 11 Version 24H2; Microsoft Windows 11 Version 25H2; Microsoft Windows 11 Version 26H2 Yayım: (1 ay önce)

Açıklama

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Zayıflık türü (CWE): CWE-416

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
microsoft windows 11 24H2 10.0.26100.0 – < 10.0.26100.9711
microsoft windows 11 25H2 10.0.26200.0 – < 10.0.26200.9711
microsoft windows 11 26h2 < 10.0.26300.9711
Microsoft Windows 11 Version 24H2 10.0.26100.0 – < 10.0.26100.9711
Microsoft Windows 11 Version 25H2 10.0.26200.0 – < 10.0.26200.9711
Microsoft Windows 11 Version 26H2 10.0.26300.0 – < 10.0.26300.9711
microsoft windows 11 version 26h2 for arm64-based systems 10.0.26300.0 – < 10.0.26300.9711

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (6)

  • cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:* < 10.0.26100.9711
  • cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:* < 10.0.26100.9711
  • cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:* < 10.0.26200.9711
  • cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:* < 10.0.26200.9711
  • cpe:2.3:o:microsoft:windows_11_26h2:*:*:*:*:*:*:arm64:* < 10.0.26300.9711
  • cpe:2.3:o:microsoft:windows_11_26h2:*:*:*:*:*:*:x64:* < 10.0.26300.9711