NetSight
high7.0

CVE-2026-96215

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privi…

Impact

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 11 Version 26H1
from 10.0.28000.0 before 10.0.28000.3231
MicrosoftWindows 11 Version 26H2
from 10.0.26300.0 before 10.0.26300.9711
MicrosoftWindows 11 Version 25H2
from 10.0.26200.0 before 10.0.26200.9711
MicrosoftWindows 11 Version 24H2
from 10.0.26100.0 before 10.0.26100.9711
MicrosoftWindows 11 24h2
before 10.0.26100.9711
MicrosoftWindows 11 25h2
before 10.0.26200.9711
MicrosoftWindows 11 26h1
before 10.0.28000.3231
MicrosoftWindows 11 26h2
before 10.0.26300.9711

Weakness classification

References