Use After Free Vulnerability in Windows Win32 Kernel Subsystem by Microsoft
CVE-2026-70271

7HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Office For Android
Windows 10 Version 1607
Windows 10 Version 1809
Windows 10 Version 21h2
Vendor
CVE Published:
13 October 2026

What is CVE-2026-70271?

A use after free vulnerability exists in the Windows Win32 Kernel Subsystem, enabling authorized attackers to execute local privilege escalation attacks. This flaw may allow an attacker to gain elevated access that could lead to more severe consequences. The vulnerability affects multiple versions of Windows, prompting the necessity for timely patches and security measures to protect vulnerable systems.

Affected Version(s)

Microsoft Office for Android 16.0.1 < 16.0.20430.20000

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.9612

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.9376

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.