PT-2026-112374 · Microsoft · Win32 Kernel Subsystem+1
CVE-2026-70288
·
Published
2026-10-13
·
Updated
2026-10-13
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Windows Win32 Kernel Subsystem (affected versions not specified)
Description
A time-of-check time-of-use (toctou) race condition exists in the Windows Win32 Kernel Subsystem. This occurs when a program checks the state of a resource before using it, but the state changes between the check and the use. An authorized attacker can exploit this to disclose sensitive information locally and affect the system.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Time Of Check To Time Of Use
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Win32 Kernel Subsystem
Windows