CVE-2026-61357: Application Information Services Elevation of Privilege Vulnerability
Application Information Services Elevation of Privilege Vulnerability
Other sources
Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2704Patch KB5121000 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9168Fixed in 10.0.26200.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26200.9106Patch KB5120994
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61357?
The severity of CVE-2026-61357 is rated high with a score of 7.8.
How do I fix CVE-2026-61357?
To fix CVE-2026-61357, ensure that you apply the latest security updates provided by Microsoft for your operating system.
What systems are affected by CVE-2026-61357?
CVE-2026-61357 affects Microsoft Windows 11 and Microsoft Windows Server 2025, including specific versions like 24h2, 25h2, and 26h1.
What type of vulnerability is CVE-2026-61357?
CVE-2026-61357 is classified as a Use After Free vulnerability, which allows attackers to elevate privileges.
Can an attacker exploit CVE-2026-61357 remotely?
No, CVE-2026-61357 requires local access for an authorized attacker to exploit the vulnerability.