Windows StateRepository API vulnerabilities
5 known CVE vulnerabilities in Windows StateRepository API, translated and rated.
- CVE-2026-85911High
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
- CVE-2026-85910Medium
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally. The vulnerability may result in leakage of memory data.
- CVE-2026-70218High
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
- CVE-2026-102216High
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
- CVE-2026-49170High
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS