CVE-2026-42982
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Vulnerability in Windows Secure Kernel Mode due to improper validation of input consistency. An authenticated attacker can elevate privileges locally.
Risk Assessment
Risk of privilege escalation in secure kernel mode, potentially allowing the attacker to bypass system security.
Recommendation
Install the latest Windows security updates. Restrict local access to trusted users only.
Other vulnerabilities in Windows Secure Kernel Mode
See all- CVE-2026-96865Medium
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. The flaw involves improper data separation in kernel mode.
- CVE-2026-70026High
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-70017Medium
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
- CVE-2026-85921High
A double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-83939High
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-69846High
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-69501High
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-50392High
A Use-After-Free vulnerability in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2021-33744Medium
A vulnerability in Windows Secure Kernel Mode allows a security feature bypass. An attacker could exploit this flaw to bypass kernel protection mechanisms.
Original NVD description (English source)
Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS