CVE-2026-105725: Windows Security App Elevation of Privilege Vulnerability
Published Oct 13, 2026
·Updated
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
Other sources
Windows Security App Elevation of Privilege Vulnerability
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft Windows Security
Microsoft Windows Security App<1000.27840.1000.0
1000.27840.1000.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1000.27840.1000.0
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·06:59 PM
Data Sourced
via MITRE·06:59 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
Exploitation requires local access and an authorized attacker account with low privileges. The available data does not indicate that this can be exploited remotely or without prior access.
2
Which software should be included in exposure review?
Review systems using Microsoft Windows Security or Microsoft Windows Security App. No affected Windows versions, builds, or fixed versions are provided in the available data.