CVE-2026-71347
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · updated Oct 15, 2026 · Microsoft Windows
Affected Microsoft products: Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 1607 for 32-bit Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 21H2 for x64-based Systems.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · NIST NVD
Detected
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
Oct 15, 2026 · NIST NVD
Updated
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
Affected
- microsoft Windows 10 Version 1607 for 32-bit Systemsversion unspecified
- microsoft Windows 10 Version 1607 for x64-based Systemsversion unspecified
- microsoft Windows 10 Version 1809 for 32-bit Systemsversion unspecified
- microsoft Windows 10 Version 1809 for x64-based Systemsversion unspecified
- microsoft Windows 10 Version 21H2 for 32-bit Systemsversion unspecified
- microsoft Windows 10 Version 21H2 for ARM64-based Systemsversion unspecified
- microsoft Windows 10 Version 21H2 for x64-based Systemsversion unspecified
- microsoft Windows 10 Version 22H2 for 32-bit Systemsversion unspecified
- microsoft Windows 10 Version 22H2 for ARM64-based Systemsversion unspecified
- microsoft Windows 10 Version 22H2 for x64-based Systemsversion unspecified
- microsoft Windows 11 Version 23H2 for ARM64-based Systemsversion unspecified
- microsoft Windows 11 Version 23H2 for x64-based Systemsversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-71347
Official CVE identifier
cve.org - Microsoft Security Update GuideVendor advisoryCVE-2026-71347
Windows 10 Version 1607 for x64-based Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 1607 for 32-bit Systems
msrc.microsoft.com - NIST NVDVulnerability recordCVE-2026-71347
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
nvd.nist.gov