LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

CRITICAL CWE-416

CVE-2026-57092

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

Microsoft·Windows 10 Version 1607

9.9/ 10

CVSS 3.1

Critical severity

0.91%

EPSS exploit odds

Chance of exploitation in the next 30 days

Higher than 61% of all CVEs

Not listed

CISA KEV catalog

No confirmed in-the-wild exploitation on CISA's list.

Timeline

Published: Jul 14, 2026
Updated: Nov 1, 2026
First covered: Jul 14, 2026
Latest story: 4 months ago

Summary

Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.

CWE-416Use After Free

Attack profile

Attack vectorNetwork

ComplexityLow

PrivilegesLow

User interactionNone

ScopeChanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected products

Microsoft Windows 10 Version 160710.0.14393.0 to before 10.0.14393.9339
Microsoft Windows 10 Version 180910.0.17763.0 to before 10.0.17763.9020
Microsoft Windows 10 Version 21H210.0.19044.0 to before 10.0.19044.7548
Microsoft Windows 10 Version 22H210.0.19045.0 to before 10.0.19045.7548
Microsoft Windows 11 Version 24H210.0.26100.0 to before 10.0.26100.8875
Microsoft Windows 11 Version 25H210.0.26200.0 to before 10.0.26200.8875
Microsoft Windows 11 version 26H110.0.28000.0 to before 10.0.28000.2525
Microsoft Windows Server 20126.2.9200.0 to before 6.2.9200.26226

References

CVE.org recordcve.org NVD entrynvd.nist.gov Microsoft Windows VMSwitch Elevation of Privilege Vulnerabilitymsrc.microsoft.com