CVE-2026-26174 in Windows

요약

\~에 의해 MITRE • 2026. 04. 14.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 책임이 있는: Microsoft
• 공개: 2026. 04. 14.
• 모더레이션: 수락
• 항목: VDB-357418
• CPE: 준비됨
• CWE: CWE-362 (확인됨)
• CVSS: 7.0 (VulDB)
• EPSS: 0.00186
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Government, Insurance, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-26174
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-26174
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-26174/