PT-2026-143286

CVE-2026-103571

·

Published

2026-11-10

·

Updated

2026-11-10

Description by

CVSS 3.1
7.0
High
MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)
Description An elevation of privilege issue occurs when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who has already gained execution on the victim system could run a specially crafted application to execute processes in an elevated context.
Recommendations Apply the security update to correct how the Windows CNG Key Isolation Service handles memory.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾