Status: UPDATED | Advisory ID: CVE-2026-32091
| CVE | CVE-2026-32091 |
| CVSS | CVSS 8.4 (High). |
| Affected products | see table below |
| Classified as | CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')) |
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-32091 |
| Vendor advisory | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32091 |