PT-2026-60596 · Microsoft · Windows 10 Version 21H2+4

CVE-2026-58598 · Publicado 2026-07-16 · Atualizado 2026-07-16

Mitre

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Correção

Race Condition

Use After Free

Enumeração de Fraquezas

CWE-362

CWE-416

Identificadores relacionados

CVE-2026-58598

Produtos afetados

Windows 10 Version 21H2

Windows 10 Version 22H2

Windows 11 Version 24H2

Windows 11 Version 25H2

Windows 11 Version 26H1

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-58598 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58598 · Aviso do Fabricante