Nov 2026: Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVE-2026-103571 Published on November 10, 2026
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting how the Windows CNG Key Isolation Service handles memory.
Vulnerability Analysis
Weakness Type
What is a Double-free Vulnerability?
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations. When a program calls free() twice with the same argument, the program's memory management data structures become corrupted. This corruption can cause the program to crash or, in some circumstances, cause two later calls to malloc() to return the same pointer. If malloc() returns the same value twice and the program later gives the attacker control over the data that is written into this doubly-allocated memory, the program becomes vulnerable to a buffer overflow attack.
CVE-2026-103571 has been classified to as a Double-free vulnerability or weakness.
Products Associated with CVE-2026-103571
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
