Skip to content
OpenAdvisories
High · 7.0 CVE-2026-70567 EUVD-2026-73647GHSA-66mx-v4gj-fpr3

Windows Display Enhancement Service Elevation of Privilege Vulnerability

Published Sep 8, 2026 · Updated Nov 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 11 Version 24H2 Product: Windows 11 Version 25H2 Product: Windows 11 version 26H1 Product: Windows Server 2025 Product: Windows Server 2025 (Server Core installation) Platform: Windows

Description

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffectedFixed
Microsoft Windows 11 Version 24H2 10.0.26100.0 – < 10.0.26100.9445 10.0.26100.9445
Microsoft Windows 11 Version 25H2 10.0.26200.0 – < 10.0.26200.9445 10.0.26200.9445
Microsoft Windows 11 version 26H1 10.0.28000.0 – < 10.0.28000.2954 10.0.28000.2954
Microsoft Windows Server 2025 10.0.26100.0 – < 10.0.26100.33438 10.0.26100.33438
Microsoft Windows Server 2025 (Server Core installation) 10.0.26100.0 – < 10.0.26100.33438 10.0.26100.33438

Advisories 2

References