CVE-2026-57088: Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability
Published Jul 14, 2026
·Updated
Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability
Other sources
Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally.
— Microsoft
Affected Software
13 affected componentsFixes available
Microsoft Extensible Storage Engine (ESENT)
Microsoft Windows Server 2025<10.0.26100.33158
10.0.26100.33158
Microsoft Windows Server 2022<10.0.20348.5386
10.0.20348.5386
Microsoft Windows Server 2025<10.0.26100.33158
10.0.26100.33158
Microsoft Windows Server 2019<10.0.17763.9020
10.0.17763.9020
Microsoft Windows 10=1809
10.0.17763.9020
Microsoft Windows Server 2019<10.0.17763.9020
10.0.17763.9020
Microsoft Windows 10=1809
10.0.17763.9020
Microsoft Windows 10 1809<10.0.17763.9020
Microsoft Windows 10 1809<10.0.17763.9020
Microsoft Windows Server 2019<10.0.17763.9020
Microsoft Windows Server 2022<10.0.20348.5386
Microsoft Windows Server 2025<10.0.26100.33158
Remediation
Event History
Jul 14, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:09 PM
Data Sourced
via MITRE·05:09 PM
DescriptionSeverity
Data Sourced
via NVD·06:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Who can exploit this vulnerability?
An attacker must already be authorized on the affected system and have local access. The issue is an elevation-of-privilege vulnerability, so it is relevant where lower-privileged local users or processes can run on affected Windows systems.
2
Which systems are identified as affected?
The listed affected software includes Microsoft Windows 10, Windows 10 version 1809, Windows Server 2019, Windows Server 2022, Windows Server 2025, and Microsoft Extensible Storage Engine (ESENT).
3
Is a patch available?
Yes. A patch is available for this vulnerability.