CVE-2026-45600

Analyzed Analyzed - Analysis Complete

Type Confusion in Windows Kernel-Mode Drivers

Publication date: 2026-06-09

Last updated on: 2026-06-10

Assigner: Microsoft Corporation

Description

Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-09

Last Modified

2026-06-10

Generated

2026-06-30

AI Q&A

2026-06-09

EPSS Evaluated

2026-06-28

NVD

CVE-2026-45600

EUVD

EUVD-2026-35561

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_11_24h2	to 10.0.26100.8655 (exc)
microsoft	windows_11_24h2	to 10.0.26100.8655 (exc)
microsoft	windows_11_25h2	to 10.0.26200.8655 (exc)
microsoft	windows_11_25h2	to 10.0.26200.8655 (exc)
microsoft	windows_11_26h1	to 10.0.28000.2269 (exc)
microsoft	windows_11_26h1	to 10.0.28000.2269 (exc)
microsoft	windows_server_2025	to 10.0.26100.32995 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-843	The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Attack-Flow Graph

Executive Summary

This vulnerability involves access of a resource using an incompatible type, also known as 'type confusion', in Windows Kernel-Mode Drivers.

It allows an authorized attacker to elevate their privileges locally on the affected system.

Impact Analysis

The vulnerability can lead to elevation of privilege, meaning an attacker with some level of access can gain higher privileges than intended.

This can result in the attacker gaining control over sensitive system functions or data, potentially compromising the security and integrity of the system.

Compliance Impact

This vulnerability allows an authorized attacker to elevate privileges locally by exploiting a type confusion issue in Windows Kernel-Mode Drivers.

Elevation of privilege vulnerabilities can potentially lead to unauthorized access to sensitive data or system resources, which may impact compliance with standards and regulations such as GDPR and HIPAA that require protection of personal and health information.

However, the provided information does not explicitly describe the direct impact of this vulnerability on compliance with these regulations.

Mitigation Strategies

This vulnerability allows an authorized attacker to elevate privileges locally by exploiting type confusion in Windows Kernel-Mode Drivers.

To mitigate this vulnerability, it is recommended to apply the security updates provided by Microsoft as soon as they become available.

Hi! I’m here to help you understand CVE-2026-45600. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70