Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-96913
Summary
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
Products covered
Windows 11 Version 26H2 for ARM64-based Systems
Windows 11 Version 26H2 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Show 12 more products
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 11 Version 25H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 23H2 for x64-based Systems
Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems
Windows 11 version 26H1 for x64-based Systems
Windows 11 Version 26H1 for ARM64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Remediation
Install KB5127648. Install KB5126651. Install KB5126657. Install KB5126653. Install KB5127646. Install KB5126868.
Vendor-listed fixes
10.0.26300.9711
10.0.17763.9376
10.0.19044.7807
10.0.19045.7807
10.0.26200.9711
10.0.22631.7652
10.0.26100.9711
10.0.28000.3231
Show 1 more fixes
10.0.14393.9612
CVEs in this advisory 1
Update history
What changed in later vendor updates
SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.
- Added fixed versions: 10.0.19045.7807.
- Added affected products: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for....
- Added fixed versions: 10.0.14393.9612, 10.0.17763.9376, 10.0.19044.7807, 10.0.22631.7652, 10.0.26100.9711.
- Removed fixed versions: 10.0.26100.9445, 10.0.26200.9445, 10.0.28000.2954.
- The vendor changed its remediation guidance.
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.