CVE-2026-62892: Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
Other sources
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.7663Patch KB5120249 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2704Patch KB5121000 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26000.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7517Patch KB5120240 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7663Patch KB5120249 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5499Fixed in 10.0.20348.5440Patch KB5120229 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9115Patch KB5120238
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62892?
CVE-2026-62892 has a high severity rating of 7.
How do I fix CVE-2026-62892?
To address CVE-2026-62892, ensure you apply the latest security updates provided by Microsoft for affected versions of Windows.
What types of systems are affected by CVE-2026-62892?
CVE-2026-62892 affects Microsoft Windows 11, Windows 10, Windows Server 2025, Windows Server 2022, and Windows Server 2019.
What is the risk associated with CVE-2026-62892?
The risk associated with CVE-2026-62892 is elevated privilege escalation, allowing an attacker to gain increased privileges on the affected system.
What does the term 'Use After Free' mean in relation to CVE-2026-62892?
'Use After Free' in CVE-2026-62892 refers to a memory safety vulnerability that allows the program to use a pointer after its associated memory has been freed, potentially leading to privilege escalation.