Skip to content
Sign in Sign up
JA EN FR
SecPulse
High 7.0

Windows Feedback Hubの脆弱性、ローカルで権限を昇格される恐れ

CVE-2026-96075 First seen on SecPulse

Summary

Windows Feedback Hubには、競合状態（レース条件）に関する脆弱性（CVE-2026-96075）があり、認証済みの攻撃者が端末上で権限を昇格させるおそれがあります。影響を受けるのはWindows 10 21H2・22H2、Windows 11 23H2・24H2・25H2・26H1で、各版の修正版が公開されています。Windows Updateなどで修正版を適用してください。

AI summary

Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.

Windows Feedback Hubには、競合状態（レース条件）に関する脆弱性（CVE-2026-96075）があり、認証済みの攻撃者が端末上で権限を昇格させるおそれがあります。影響を受けるのはWindows 10 21H2・22H2、Windows 11 23H2・24H2・25H2・26H1で、各版の修正版が公開されています。Windows Updateなどで修正版を適用してください。

Affected packages

PackageAffected → Fixed
MicrosoftWindows 10 Version 21H2
≥ 10.0.19044.0, < 10.0.19044.7846→ 10.0.19044.7846
MicrosoftWindows 10 Version 22H2
≥ 10.0.19045.0, < 10.0.19045.7846→ 10.0.19045.7846
MicrosoftWindows 11 Version 23H2
≥ 10.0.22631.0, < 10.0.22631.7711→ 10.0.22631.7711
MicrosoftWindows 11 Version 24H2
≥ 10.0.26100.0, < 10.0.26100.9974→ 10.0.26100.9974
MicrosoftWindows 11 Version 25H2
≥ 10.0.26200.0, < 10.0.26200.9974→ 10.0.26200.9974
MicrosoftWindows 11 version 26H1
≥ 10.0.28000.0, < 10.0.28000.3501→ 10.0.28000.3501
MicrosoftWindows 11 Version 26H2
≥ 10.0.26300.0, < 10.0.26300.9974→ 10.0.26300.9974
MicrosoftWindows Server 2022
≥ 10.0.20348.0, < 10.0.20348.5870→ 10.0.20348.5870
MicrosoftWindows Server 2025
≥ 10.0.26100.0, < 10.0.26100.33822→ 10.0.26100.33822
MicrosoftWindows Server 2025 (Server Core installation)
≥ 10.0.26100.0, < 10.0.26100.33822→ 10.0.26100.33822
Original description The description as published by the source.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate privileges locally.

Source: Microsoft Security Response Center Blog NVD GitHub Advisory

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details