CVE-2026-41095

Опубликовано: 12 мая 2026

Источник: msrc

CVSS3: 7.8

EPSS Низкий

Описание

Data Deduplication Elevation of Privilege Vulnerability

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Продукт	Статья	Обновление
Windows Server 2012 R2	5087471	Monthly Rollup
Windows Server 2012 R2 (Server Core installation)	5087471	Monthly Rollup
Windows Server 2016	5087537	Security Update
Windows Server 2016 (Server Core installation)	5087537	Security Update
Windows Server 2019	5087538	Security Update
Windows Server 2019 (Server Core installation)	5087538	Security Update
Windows Server 2022	5087545 5087424	Security Update Security Hotpatch Update
Windows Server 2022 (Server Core installation)	5087545 5087424	Security Update Security Hotpatch Update
Windows Server 2022, 23H2 Edition (Server Core installation)	5087541	Security Update
Windows Server 2025	5087539 5087423	Security Update Security Hotpatch Update

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 26%

0.00332

Низкий

7.8 High

CVSS3

CVE-2026-41095

CVSS3: 7.8

nvd

3 месяца назад

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

GHSA-wv8v-gjw3-v3xp

CVSS3: 7.8

github

3 месяца назад

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

BDU:2026-06875

CVSS3: 7.8

fstec

3 месяца назад

Уязвимость функции Data Deduplication сервера Windows Server, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 26%

0.00332

Низкий

7.8 High

CVSS3