[CVE-2026-58598] Concurrent execution using shared resource with improper synchronization ('race condition') in Windo…

Descripción técnica

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Puntuación CVSS

Score: 7/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Windows 10 21h2, Windows 10 22h2, Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 — Microsoft

Debilidades (CWE)

CWE-362, CWE-416

Fuente oficial

Publicado en NIST NVD.