CVE-2026-70567
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
Scoring
- Severity
- HIGH
- CVSS base score
- 7
- CVSS vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
- CWE
- CWE-415
- Published
- 2026-09-08
- Last modified
- 2026-09-09
Affected products
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Microsoft Windows 11 version 26H1
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
Weakness type
Related vulnerabilities
- CVE-2026-87585 — Double free in PDFium in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote...
- CVE-2026-79907 — Acrobat Reader | Double Free (CWE-415)
- CVE-2026-81950 — Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-80080 — Microsoft Office Word Remote Code Execution Vulnerability
- CVE-2026-69309 — Windows Print Spooler Components Elevation of Privilege Vulnerability
- CVE-2026-69725 — Windows Hello Elevation of Privilege Vulnerability
- CVE-2026-69876 — Windows DHCP Server Remote Code Execution Vulnerability
- CVE-2026-69398 — Windows Bluetooth Service Elevation of Privilege Vulnerability