PT-2026-47969 · Microsoft · Windows 10 Version 21H2+7

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-45487

NVD

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2026-45487

Affected Products

Windows 10 Version 21H2

Windows 10 Version 22H2

Windows 11 Version 23H2

Windows 11 Version 24H2

Windows 11 Version 25H2

Windows 11 Version 26H1

Windows Server 2022

Windows Server 2025

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-45487 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45487 · Vendor Advisory