VYPR
High severity7.0NVD Advisory· Published Apr 14, 2026· Updated Apr 17, 2026

CVE-2026-32224

CVE-2026-32224

Description

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Affected products

2
  • cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*range: <10.0.28000.1836
    • cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*range: <10.0.28000.1836

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.