CVE-2026-20859Disclosure(microsoft / windows_11_24h2)

Windows privilege escalation vulnerabilities is CVE-2026-20859 in Windows Kernel-Mode Drivers - https://www.sentinelone.com/vulnerability-database/cve-2026-20859/ The bug was a use-after-free vulnerability caused by improper lifetime management of kernel objects. By triggering the vulnerable code path and reclaiming the freed memory with attacker-controlled data, a local authenticated attacker could trick the kernel into operating on stale pointers. This memory corruption primitive could be leveraged to achieve arbitrary kernel memory access and ultimately elevate privileges to SYSTEM.