Skip to content

Exploited: 178

LatestCVE-2026-115731 — Report Deserialization Code Execution

7.0

CVE-2026-105725Fix available

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

Microsoft Windows Security App2026-10-13 19:18 UTC1 min readRead in

Summary

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

Remediation

Inventory every Microsoft Windows Security App deployment, including staging.
Upgrade Microsoft Windows Security App to 1000.27840.0.1000.
Confirm the running version after the upgrade.

References

Advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105725

CVSS vector

Attack vector: Local
Complexity: High
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected versions

Version	Fixed in
– <1000.27840.0.1000	1000.27840.0.1000

Weakness

CWE-416

Exploit probability (EPSS)

0.3%

Timeline

2026-10-13Publicly disclosed

Sources

NVD