Windows 11 version 26H1 vulnerability

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Published 14 Sep 2026Updated 15 Sep 20261 sources
CVSS 8.2

What happened

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Affected versions

Windows 11 version 26H1: 10.0.28000.0 through before 10.0.28000.2956 (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

No public PoC reference has passed the current publication threshold.