Windows Autopilot Elevation of Privilege Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 13, 2026 · CIRCL Vulnerability Lookup

   Detected

   Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

2. Oct 14, 2026 · CIRCL Vulnerability Lookup

   Updated

   Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Affected

• microsoft Windows 11 Version 24H2 for ARM64-based Systemsversion unspecified
• microsoft Windows 11 Version 24H2 for x64-based Systemsversion unspecified
• microsoft Windows 11 Version 25H2 for ARM64-based Systemsversion unspecified
• microsoft Windows 11 Version 25H2 for x64-based Systemsversion unspecified
• microsoft Windows 11 Version 26H2 for ARM64-based Systemsversion unspecified
• microsoft Windows 11 Version 26H2 for x64-based Systemsversion unspecified
• vendor Microsoft Windows 11 Version 24H2version unspecified
• vendor Microsoft Windows 11 Version 25H2version unspecified
• vendor Microsoft Windows 11 Version 26H2version unspecified

Sources

• CIRCL Vulnerability LookupVulnerability recordCVE-2026-108134

  Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

  vulnerability.circl.lu
• CVE.orgVulnerability recordCVE-2026-108134

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-108134

  30-day exploitation probability 0.3%

  first.org
• Microsoft Security Update GuideVendor advisoryCVE-2026-108134

  Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems

  msrc.microsoft.com

References

• Windows Autopilot Elevation of Privilege Vulnerability · msrc.microsoft.com