Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

Timeline

Detection, updates, and resolution for this record.

1. Sep 8, 2026 · NIST NVD

   Detected

   Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

2. Oct 15, 2026 · NIST NVD

   Updated

   Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

Affected

• cpe microsoft/windows 11 24h2version unspecified
• cpe microsoft/windows 11 25h2version unspecified
• cpe microsoft/windows 11 26h1version unspecified
• cpe microsoft/windows server 2022version unspecified
• cpe microsoft/windows server 2025version unspecified

Sources

• CVE.orgCVE-2026-78457

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2026-78457

  30-day exploitation probability 0.3%

  first.org
• NIST NVDCVE-2026-78457

  Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

  nvd.nist.gov

References

• Patch · msrc.microsoft.com