CVE-2026-45487

نوع الضعف

Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

المنتجات المتأثرة

• microsoft windows_10_21h2
• microsoft windows_10_22h2
• microsoft windows_11_23h2
• microsoft windows_11_24h2
• microsoft windows_11_25h2
• microsoft windows_11_26h1
• microsoft windows_server_2022
• microsoft windows_server_2025

المراجع

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45487