CVE-2026-88152
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
A use after free vulnerability in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials could exploit this flaw to gain higher privileges on the system, potentially leading to full host compromise.
Recommendation
Immediately apply the latest Microsoft security updates for BITS and restrict system access to trusted users only.
Other vulnerabilities in Windows Background Intelligent Transfer Service (BITS)
See all- CVE-2026-88173High
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-88159High
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-88146High
A race condition due to improper synchronization of a shared resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-88142High
A use after free vulnerability in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-88121High
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-88118High
Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-85848High
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-85843High
Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-85832High
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS