CVE-2026-56198: CWE-125: Out-of-bounds Read in Microsoft Windows 11 Version 24H2

This vulnerability (CVE-2026-56198) is an out-of-bounds read issue in the Microsoft Trace Data Helper component of Windows 11 Version 24H2. It enables an authorized local attacker to elevate privileges by exploiting improper memory access. The CVSS 3.1 base score is 7.8, indicating high severity with high impact on confidentiality, integrity, and availability. The affected versions include Windows 11 builds from 10.0.26100.0 up to but not including 10.0.26100.9445, 10.0.26200.0 up to but not including 10.0.26200.9445, 10.0.28000.0 up to but not including 10.0.28000.2954, and 10.0.26100.0 up to but not including 10.0.26100.33438. Microsoft has released an official fix for this vulnerability.

An authorized local attacker can exploit this out-of-bounds read vulnerability to elevate privileges on affected Windows 11 Version 24H2 systems. This could lead to full system compromise with high impact on confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Windows 11 Version 24H2 as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56198. No additional mitigation steps are indicated beyond applying the official patch.