← All advisories

High severity7.0NVD Advisory· Published Apr 14, 2026· Updated Apr 17, 2026

CVE-2026-32224

CVE-2026-32224

Description

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Affected products

3

Microsoft/Windows 11 26h12 versions
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*+ 1 more
- cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*range: <10.0.28000.1836
- cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*range: <10.0.28000.1836
Microsoft/Windows Server 2003llm-fuzzy

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32224nvdVendor Advisory

News mentions

1

Patch Tuesday - April 2026
Rapid7 Blog · Apr 14, 2026