CVE-2026-96317: CWE-416: Use After Free in Microsoft Windows 10 Version 1809

This vulnerability (CVE-2026-96317) involves a use-after-free condition in the Windows Kernel of Microsoft Windows 10 Version 1809 and later builds. An authorized local attacker can exploit this flaw to elevate privileges on the affected system. The vulnerability is tracked under CWE-416 (Use After Free). Multiple Windows 10 builds are affected, with fixed versions available. The CVSS v3.1 score is 7.8, indicating high severity. Microsoft has published an official security update to address this issue.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher system rights. This can lead to full system compromise depending on the privileges escalated. The vulnerability affects confidentiality, integrity, and availability as indicated by the CVSS vector (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96317. No additional mitigation steps are required beyond applying the official patch.