Untrusted Pointer Dereference in Microsoft Windows - CVE-2026-103578
Published: October 13, 2026
Vulnerability identifier: #VU154319
CSH Severity: Medium
CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-103578
CWE-ID: CWE-822
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker with physical access to escalate privileges to SYSTEM.
The vulnerability exists due to untrusted pointer dereference in Windows Kernel when handling untrusted pointers during a physical attack. An attacker with physical access can carry out a physical attack to escalate privileges to SYSTEM.
Affected software
Microsoft Windows
How to mitigate CVE-2026-103578
Install security update from vendor's website.
Microsoft Windows - update to 11 26H1 10.0.28000.3231