CVE-2026-103578

Awaiting Analysis Awaiting Analysis - Queue

Untrusted Pointer Dereference in Windows Kernel

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: Microsoft Corporation

Description

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-103578

EUVD

EUVD-2026-100391

Affected Vendors & Products

Vendor	Product	Version / Range
Microsoft	Windows	11 version 26H1 10.0.28000.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-822	The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

Attack-Flow Graph

Executive Summary

This vulnerability is an untrusted pointer dereference in the Windows Kernel. It allows an unauthorized attacker to elevate their privileges by exploiting a physical attack vector.

Impact Analysis

An attacker with physical access could exploit this to gain higher privileges on the system, potentially allowing them to execute arbitrary code, install malware, or access sensitive data.

Mitigation Strategies

Apply the latest Windows security updates from Microsoft Update to patch the kernel vulnerability. Ensure physical access controls are in place to prevent unauthorized local attacks.

Hi! I’m here to help you understand CVE-2026-103578. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70