CVE-2026-45593Patch(microsoft / windows_10_1809)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_10_1809 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Windows SDK allows an authorized attacker to elevate privileges locally.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-190CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1809
  • windows_10_21h2
  • windows_10_22h2
  • windows_11_23h2

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-06-09); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2019windows_server_2022windows_server_2025

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-09: 1Mentions · 2026-06-12: 1Patch / Workaround · 2026-06-09: 1Patch / Workaround · 2026-06-12: 1Technical Details · 2026-06-09: 1Technical Details · 2026-06-12: 106-0906-12
Signal classification1 categories
Patch
2100.0%
Referenced assets1 URL
Full discourse2 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH Severity: CVE-2026-45593 (CVSS 7.8) Use-after-free in Windows SDK enables local privilege escalation by authenticated attackers. Patch immediately if running affected SDK versions. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/K81RqWnjKn

    Post summary

    The tweet warns of a high‑severity use‑after‑free flaw (CVE‑2026‑45593) in the Windows SDK and calls for immediate patching of affected versions.

    0000037
    44 followersView on X
  • WindowsForum@windowsforum
    Patch

    🪟 CVE in the Windows SDK? Love it—Microsoft just reminded everyone the build chain is as hackable as the UI. Patch fast or your “secure dev” turns into an exploit conveyor belt. #Windows #Microsoft #CVE #SecurityUpdate #DevOps https://windowsforum.com/threads/cve-2026-45593-windows-sdk-eop-why-build-systems-must-be-patched-fast.424465/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #PrivilegeEscalation https://t.co/x7rlFYBVbA

    Post summary

    The tweet spotlights the Windows SDK CVE‑2026‑45593, labeling it a privilege‑escalation issue and urging timely patching, but it does not provide a PoC, exploit code, or detailed technical description beyond the CVE ID and severity tag.

    0000030
    1.2K followersView on X
CPE platform detail19 entries

19 of 19 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_23h2--arm64
OSmicrosoftwindows_11_23h2--x64
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2025--x64

Explore more