CVE-2026-69501: CWE-822: Untrusted Pointer Dereference in Microsoft Windows 10 Version 21H2

This vulnerability, identified as CWE-822 (Untrusted Pointer Dereference), occurs in the Windows Secure Kernel Mode component of Microsoft Windows 10 Version 21H2. It allows an authorized local attacker to dereference untrusted pointers, leading to privilege escalation. The CVSS 3.1 base score is 7.0, indicating high severity, with attack vector local, attack complexity high, privileges required low, and no user interaction needed. The vulnerability impacts confidentiality, integrity, and availability with high impact. Microsoft has published an official fix for the affected versions.

An authorized local attacker can exploit this vulnerability to elevate privileges on the affected Windows 10 systems, potentially gaining higher-level access than intended. This can compromise system confidentiality, integrity, and availability.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions as soon as possible. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69501 for detailed patch information and update instructions.