PT-2026-143286
CVE-2026-103571
·
Published
2026-11-10
·
Updated
2026-11-10
Description by
CVSS 3.1
7.0
HighMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Windows (affected versions not specified)
Description
An elevation of privilege issue occurs when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who has already gained execution on the victim system could run a specially crafted application to execute processes in an elevated context.
Recommendations
Apply the security update to correct how the Windows CNG Key Isolation Service handles memory.
Found an issue in the description? Have something to add? Feel free to write us 👾