Status: UPDATED | Advisory ID: CVE-2026-26181
| CVE | CVE-2026-26181 |
| CVSS | CVSS 7.8 (High). |
| Affected products | see table below |
| Classified as | CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')) |
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-26181 |
| Vendor advisory | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26181 |