high · CVSS v3 7.8

CVE-2026-20568

AFE component suffers a use-after-free that can crash the system and allow local privilege escalation without user interaction. The flaw is

Overview

AFE component suffers a use-after-free that can crash the system and allow local privilege escalation without user interaction. The flaw is high severity and can affect any system running the affected component. Defenders should apply the vendor patch promptly.

Description

In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11439283; Issue ID: MSV-10003.

Impact

Local attackers with system privileges can crash the system, compromising availability, and potentially gain higher privileges, threatening confidentiality and integrity. System administrators and security teams are directly impacted.

Remediation

Apply the vendor patch ALPS11439283 immediately. Verify the patch installation and monitor for crash events. Restrict local system privileges and enforce least privilege principles.

Risk context

High severity (CVSS 7.8) with no user interaction required. The vulnerability poses a significant risk to systems running the affected component.

Affected products

  • Microsoft afe

Scores

Severity
high
CVSS v2
4.6
CVSS v3
7.8
CVSS v4
—
EPSS
—

privilege-escalation use-after-free local system-crash high-severity patch Microsoft

← All CVEs

Related CVEs

high

CVE-2026-20552

CVE-2026-20552 is an out-of-bounds write vulnerability in the ccci component of MediaTek firmware. It can cause a remote denial-of-service when a user interacts with the affected device. The flaw requires no elevated privileges and is mitigated by applying the vendor patch.

View analysis

high

CVE-2026-20555

CVE-2026-20555 is an out‑of‑bounds read in modem firmware that can cause a remote denial of service when a user equipment (UE) connects to a rogue base station. The flaw requires no user interaction or elevated privileges and can be triggered by an attacker controlling the base station. Affected devices can become unresponsive, disrupting connectivity for users.

View analysis

high

CVE-2026-20558

CVE-2026-20558 is a local privilege escalation vulnerability in the GPU pdma component caused by a use‑after‑free bug. It allows an attacker with local access to gain higher privileges on the affected system without additional execution privileges. The flaw exists in the Windows GPU driver and requires no user interaction.

View analysis

high

CVE-2026-20559

CVE-2026-20559 is a use‑after‑free memory corruption in GPU pdma that can lead to local privilege escalation. The flaw exists in the GPU driver and does not require user interaction. It allows an attacker with user execution privileges to gain higher privileges on the host.

View analysis