Skip to content
OpenAdvisories
High MSRC-CVE-2026-49798 1 CVE

Windows Kernel Elevation of Privilege Vulnerability

Published Jul 14, 2026 · Updated Aug 20, 2026 · Revision 5

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

How could an attacker exploit this vulnerability?
An attacker could run a specially crafted program on a local system that triggers the vulnerable function while a menu is being processed, causing the system to use memory that has already been freed. This can result in memory corruption, which an attacker may use to run malicious code.

Security updates
10.0.17763.9020 — https://support.microsoft.com/help/5099538
10.0.20348.5386 — https://support.microsoft.com/help/5099540
10.0.19044.7548 — https://support.microsoft.com/help/5099539
10.0.26100.33158 — https://support.microsoft.com/help/5099536
10.0.26200.8875 — https://support.microsoft.com/help/5101650
10.0.28000.2525 — https://support.microsoft.com/help/5101649
10.0.14393.9339 — https://support.microsoft.com/help/5099535
6.2.9200.26226 — https://support.microsoft.com/help/5099445
6.3.9600.23291 — https://support.microsoft.com/help/5099444

Vulnerabilities 1

Revision history

  1. #5

    Updated an acknowledgement. This is an informational change only.

  2. #4

    Acknowledgement Updated

  3. #3

    Acknowledgement Updated

  4. #2

    Updated an acknowledgement. This is an informational change only.

  5. #1

    Information published.

References