VULNERABILITY INTELLIGENCE

CVE-2026-54107

CVSS score8.8 HIGH

EPSS probability0.21%

CISA KEVNot currently listed

Published2026-07-14

Last modified2026-07-15

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.