CVE-2026-58598

Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Affected Software

VendorProductVersion RangeStatus
MicrosoftWindows 10 Version 21H210.0.19044.0 < 10.0.19044.7548affected
MicrosoftWindows 10 Version 22H2-affected
MicrosoftWindows 11 Version 24H210.0.26100.0 < 10.0.26100.8875affected
MicrosoftWindows 11 Version 25H210.0.26200.0 < 10.0.26100.8875affected
MicrosoftWindows 11 version 26H110.0.28000.0 < 10.0.28000.2525affected

Weaknesses

  • CWE-362: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
  • CWE-416: CWE-416: Use After Free

References