CVE-2026-68824

HIGHCVSS 7.0

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

Timeline

Published:September 8th, 2026 6:18 PM

Last modified:September 8th, 2026 8:17 PM

CVSS Scoring

CVSS v3: 7.0 (HIGH)

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-362 CWE-416

References & Reports

Advisories, patches, and third-party reports

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68824

Source: NIST NVD · Data may lag official sources by up to one minute