Skip to content

CVE record · 1 source

CVE-2026-119851

CVSS 7.0

Time-of-check time-of-use (toctou) race condition in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Vendor: Microsoft
Product: Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2
CVSS v3.1: 7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-367
Exposure class: Operating system

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

39

CVE NVD 2h ago

Time-of-check time-of-use (toctou) race condition in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-119851 Microsoft