CVE-2026-88113: CWE-416: Use After Free in Microsoft Windows 10 Version 1809

CVE-2026-88113 is a use-after-free vulnerability (CWE-416) in the Windows Broadcast DVR User Service component of Microsoft Windows 10 Version 1809 and later builds. This vulnerability enables an authorized local attacker to elevate privileges by exploiting the use-after-free condition. The affected versions include multiple Windows 10 builds starting from 10.0.17763.0 up to but not including patched versions such as 10.0.17763.9376 and others. The vulnerability has a CVSS v3.1 base score of 7.0, indicating high severity, with attack vector local, attack complexity high, privileges required low, no user interaction, and impacts on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability.

An authorized local attacker can exploit this use-after-free vulnerability to elevate their privileges on the affected Windows 10 systems. This could allow the attacker to gain higher-level access rights than intended, potentially leading to further system compromise. The vulnerability impacts confidentiality, integrity, and availability of the system.

Microsoft has released an official fix for CVE-2026-88113. It is recommended to apply the security updates provided by Microsoft for the affected Windows 10 versions to remediate this vulnerability. No additional mitigation steps are indicated by the vendor advisory.