Mar 2026: Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-24287 Published on March 10, 2026
Windows Kernel Elevation of Privilege Vulnerability
External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally.
Weakness Type
External Control of File Name or Path
The software allows user input to control or influence paths or file names that are used in filesystem operations.
Products Associated with CVE-2026-24287
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft Windows 10 Version 1809:- Version 10.0.17763.0 and below 10.0.17763.8511 is affected.
- Version 10.0.19044.0 and below 10.0.19044.7058 is affected.
- Version 10.0.19045.0 and below 10.0.19045.7058 is affected.
- Version 10.0.22631.0 and below 10.0.22631.6783 is affected.
- Version 10.0.22631.0 and below 10.0.22631.6783 is affected.
- Version 10.0.26100.0 and below 10.0.26100.8037 is affected.
- Version 10.0.26200.0 and below 10.0.26200.8037 is affected.
- Version 10.0.28000.0 and below 10.0.28000.1719 is affected.
- Version 10.0.28000.0 and below 10.0.28000.1719 is affected.
- Version 10.0.17763.0 and below 10.0.17763.8511 is affected.
- Version 10.0.17763.0 and below 10.0.17763.8511 is affected.
- Version 10.0.20348.0 and below 10.0.20348.4893 is affected.
- Version 10.0.25398.0 and below 10.0.25398.2207 is affected.
- Version 10.0.26100.0 and below 10.0.26100.32522 is affected.
- Version 10.0.26100.0 and below 10.0.26100.32522 is affected.