CVE-2026-35420

Опубликовано: 12 мая 2026

Источник: msrc

CVSS3: 7.8

EPSS Низкий

Описание

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Продукт	Статья	Обновление
Windows Server 2012	5087470	Monthly Rollup
Windows Server 2012 (Server Core installation)	5087470	Monthly Rollup
Windows Server 2012 R2	5087471	Monthly Rollup
Windows Server 2012 R2 (Server Core installation)	5087471	Monthly Rollup
Windows Server 2016	5087537	Security Update
Windows Server 2016 (Server Core installation)	5087537	Security Update
Windows Server 2019	5087538	Security Update
Windows Server 2019 (Server Core installation)	5087538	Security Update
Windows Server 2022	5087545 5087424	Security Update Security Hotpatch Update
Windows Server 2022 (Server Core installation)	5087545 5087424	Security Update Security Hotpatch Update

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 24%

0.0032

Низкий

7.8 High

CVSS3

CVE-2026-35420

CVSS3: 7.8

nvd

3 месяца назад

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

GHSA-g3c9-x495-5rjg

CVSS3: 7.8

github

3 месяца назад

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

BDU:2026-06612

CVSS3: 7.8

fstec

3 месяца назад

Уязвимость ядра операционных систем Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 24%

0.0032

Низкий

7.8 High

CVSS3