CVE-2026-77899: Windows Security Center Elevation of Privilege Vulnerability
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
Other sources
Windows Security Center Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26349Patch KB5123065 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2954Patch KB5124012 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9445Patch KB5124008 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9445Patch KB5124008
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running the listed affected software are exposed: Microsoft Windows 11, Microsoft Windows Server 2012, and Microsoft Windows Security Center. Exploitation is local rather than network-based.
What does an attacker need to exploit it?
The attacker must already be authorized on the affected system and have low-level privileges. No user interaction is required, but the attack has high complexity.
What is the likely impact of successful exploitation?
A successful exploit can elevate the attacker's privileges locally. The supplied severity vector indicates high potential impact to confidentiality, integrity, and availability.