CVE-2026-69324 in Windows

Riassunto

di MITRE • 08/09/2026

Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Microsoft
• Prenotare: 03/08/2026
• Divulgazione: 08/09/2026
• Moderazione: accettato
• Voce: VDB-400153
• CPE: pronto
• CWE: CWE-843 (confermato)
• CVSS: 7.8 (CNA)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-69324
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-69324
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-69324/