CVE-2026-70122

Published: Ott 13, 2026 Last Modified: Ott 13, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 6,5

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: low

User Interaction: none

Scope: changed

Confidentiality: none

Integrity: high

Availability: none

AI Translation Available

Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

367

Incomplete

Abstraction: Base Structure: Simple

Security Scopes Affected:

Integrity Other Non-Repudiation

Potential Impacts:

Alter Execution Logic Unexpected State Modify Application Data Modify Files Or Directories Modify Memory Other Hide Activities

All platforms may be affected

Likelihood of Exploit: Medium

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70122