cve-2026-68846

CVE-2026-68846 is a Windows Kernel elevation of privilege vulnerability addressed in Microsoft's September 2026 security release. The flaw is a use-after-free condition that Microsoft classifies as CWE-41, allowing an authorized attacker to elevate privileges over a network. It affects supported Windows client and server releases, including Windows 10, Windows 11, and Windows Server 2012 through Windows Server 2025. Microsoft rates the issue Important with a CVSS base score of 7.1 and a temporal score of 6.2, and flags customer action as required. Administrators should deploy the applicable cumulative update and confirm the resulting build number to ensure the fix is in place.