CVE-2026-40369

Published May 12, 2026

Last updated 12 days ago

Windows

Windows Kernel

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-40369 is identified as an untrusted pointer dereference vulnerability residing within the Windows Kernel. This flaw enables an authorized attacker to achieve local privilege escalation. The vulnerability allows an attacker, who already has authorized access to the system, to elevate their privileges. This issue was published on May 12, 2026, and is categorized as an Elevation of Privilege vulnerability.

Description: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Source: secure@microsoft.com
NVD status: Modified
Products: windows_11_24h2, windows_11_25h2, windows_11_26h1, windows_server_2025

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

secure@microsoft.com: CWE-822

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId": "048AD3CD-DD62-4B62-9302-61779D998B4A",
            "versionEndExcluding": "10.0.26100.8390",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "3682F4DD-0870-4E39-B75E-649C89BB1E08",
            "versionEndExcluding": "10.0.26100.8390",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId": "C2C93D38-DFD7-4DE1-95B8-6D73E4A545D6",
            "versionEndExcluding": "10.0.26200.8390",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "05EB89A0-2ADD-4B67-A644-41FE1DE69E4A",
            "versionEndExcluding": "10.0.26200.8390",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId": "D45A5D2F-E058-4033-B184-BAE224FC1CEA",
            "versionEndExcluding": "10.0.28000.2113",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "5127F350-9271-4B74-84E0-D7E5D2D5640E",
            "versionEndExcluding": "10.0.28000.2113",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "9ABAB3B9-28AF-4278-8E78-E1191B1AFC0C",
            "versionEndExcluding": "10.0.26100.32772",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.