CVE-2026-108134: Windows Autopilot Elevation of Privilege Vulnerability
Published Oct 13, 2026
·Updated
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
Other sources
Windows Autopilot Elevation of Privilege Vulnerability
— Microsoft
Affected Software
7 affected componentsFixes available
Microsoft Windows Autopilot
Microsoft Windows 11=25H2
10.0.26200.9711
Microsoft Windows 11=26H2
10.0.26300.9711
Microsoft Windows 11=26H2
10.0.26300.9711
Microsoft Windows 11=24H2
10.0.26100.9711
Microsoft Windows 11=25H2
10.0.26200.9711
Microsoft Windows 11=24H2
10.0.26100.9711
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26300.9711Patch KB5127648 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9711Patch KB5127648 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9711Patch KB5127648
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·07:01 PM
Data Sourced
via MITRE·07:01 PM
DescriptionSeverity