Vulnerabilities

Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Microsoft

Product

Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 23H2

CVSS v3.1

7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation

SSVC none, automatable no, impact total

Weakness

CWE-416

Exposure class

Operating system

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-119405 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 39
   CVE NVD 3h ago

   Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-119866 Microsoft
2. 39
   CVE NVD 3h ago

   Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-119844 Microsoft
3. 39
   CVE NVD 3h ago

   Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-119835 Microsoft
4. 39
   CVE NVD 3h ago

   Untrusted pointer dereference in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-119833 Microsoft
5. 46
   CVE NVD 3h ago

   Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-119826 Microsoft
6. 39
   CVE NVD 3h ago

   Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-119403 Microsoft
7. 39
   CVE NVD 3h ago

   Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-119402 Microsoft
8. 39
   CVE NVD 3h ago

   Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-119401 Microsoft
9. 39
   CVE NVD 3h ago

   Use after free in Kernel Transaction Manager allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-119397 Microsoft
10. 46
    CVE NVD 3h ago

    Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-119391 Microsoft
11. 39
    CVE NVD 3h ago

    Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-119389 Microsoft
12. 39
    CVE NVD 3h ago

    Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-119386 Microsoft
13. 39
    CVE NVD 3h ago

    Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-118224 Microsoft
14. 39
    CVE NVD 3h ago

    Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-118223 Microsoft
15. 39
    CVE NVD 3h ago

    Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 8.8 CVE-2026-118219 Microsoft
16. 39
    CVE NVD 3h ago

    Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 8.8 CVE-2026-118218 Microsoft
17. 39
    CVE NVD 3h ago

    Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 8.8 CVE-2026-118217 Microsoft
18. 39
    CVE NVD 3h ago

    Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 8.8 CVE-2026-118216 Microsoft
19. 39
    CVE NVD 3h ago

    Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-118215 Microsoft
20. 39
    CVE NVD 3h ago

    Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-118126 Microsoft