CVE-2026-26179 is a double free vulnerability (CWE-415) in the Windows Kernel of Microsoft Windows 11 version 22H3 (build 10.0.22631.0). This vulnerability permits a local attacker with authorized access to elevate privileges by exploiting improper memory management in the kernel. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability with low attack complexity and no user interaction required. Microsoft has released an official patch to remediate this vulnerability as detailed in their security update guide.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher system rights and control. This can lead to full system compromise, affecting confidentiality, integrity, and availability of the affected system. There are currently no known exploits in the wild.

An official fix is available from Microsoft. It is recommended to apply the security update provided by Microsoft as soon as possible to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26179 for the official patch and update instructions.