CVE-2026-45593: Windows SDK Elevation of Privilege Vulnerability

Synopsis

A use-after-free vulnerability in the Windows SDK allows a locally authenticated attacker to escalate privileges on affected Windows 10 and Windows 11 systems. The attacker needs only a low-privilege account and no network access; exploitation is performed entirely from an existing local session. Successful exploitation grants the attacker high-level control over confidentiality, integrity, and availability on the host. Patched-image rebuilds at the fix versions are available on HarborGuard for environments running affected Windows base images.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network path to the target is required.

• AuthenticationRequired

  Any low-privilege local account is sufficient; no administrative credentials are needed to trigger the vulnerability.

• Victim interactionNot required

  No action from another user is needed; the attacker executes the exploit entirely within their own session.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special environmental conditions, race conditions, or memory-layout knowledge.

Blast Radius

• Reads sensitive files, credentials, and process memory accessible only to privileged accounts.
• Modifies system files, registry keys, and security configurations that a low-privilege account cannot normally touch.
• Terminates or disrupts system processes and services, causing instability or denial of service on the host.
• Provides a foothold for lateral movement or persistence by installing privileged backdoors or altering security policy.