CVE-2026-42982

Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Scoring

Severity

HIGH

CVSS base score

7.8

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS probability

0.33%

CWE

CWE-1288

Published

2026-07-14

Last modified

2026-09-09

Affected products

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Microsoft Windows 10 Version 22H2
• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 23H2
• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2

Weakness type

• CWE-1288

Related vulnerabilities

• CVE-2026-69793 — Windows TCP/IP Security Feature Bypass Vulnerability
• CVE-2026-18238 — OOBR in rpcap client in libpcap before 1.10.7
• CVE-2026-18794 — OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite
• CVE-2026-73219 — CVAT: Denial of service with regards to automatic annotation
• CVE-2026-18209 — Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check
• CVE-2026-15943 — Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change
• CVE-2026-14781 — Keycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo email
• CVE-2026-9689 — Keycloak: org.keycloak.protocol.oidc: http parameter pollution in oidc redirect uri allows response parameter duplication - #ghi-604

Markdown version · Browse all CVEs