CVE-2026-58532Disclosure(microsoft / windows_10_1607)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_10_1607 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-190

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1607
  • windows_10_1809
  • windows_10_21h2
  • windows_10_22h2

Threat summary

  • Patch or workaround signal is available
  • 6 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • Peaked 2d ago at 3 mentions (2026-07-17); latest day: 1
  • 6 total mentions across 4 days

Affected systems

Vendors
Products
windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016windows_server_2019

2 versions affected across 12 products

Deep dive

Activity timeline6 mentions / 4d
01223Mentions · 2026-07-15: 1Mentions · 2026-07-17: 3Mentions · 2026-07-18: 1Mentions · 2026-10-13: 1Patch / Workaround · 2026-07-15: 1Technical Details · 2026-07-15: 1Technical Details · 2026-07-17: 1Technical Details · 2026-07-18: 107-1507-1707-1810-13
Signal classification3 categories
Disclosure
240.0%
General
240.0%
Patch
120.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-151
Patch1
2026-07-173
Disclosure1General2
2026-07-181
Disclosure1
Full discourse6 posts
  • April@april_ivyyy
    Disclosure

    How I found an integer overflow in tcpip.sys (CVE-2026-58532) https://aprl.pet/writing/cve-2026-58532

    Post summary

    The text announces the discovery of an integer overflow in Windows' tcpip.sys (CVE‑2026‑58532) and lists its identifier, but it provides no PoC, exploit, mitigation, or active‑exploitation details.

    741127714626.7K
    526 followersView on X
  • April@april_ivyyy

    Hi friends, I’m looking for work in threat intel / vulnerability research. I’m based in the UK and open to relocation or remote. Most recent work is CVE-2026-58532 in the Windows kernel, and many contributions to OpenJDK. DMs open, RTs are appreciated :) https://aprl.pet/writing/cve-2026-58532

    5240119305.8K
    605 followersView on X
  • April@april_ivyyy
    General

    CVE-2026-58532 Thank you MSRC for being awesome :)

    Post summary

    The provided text merely references a CVE number with a casual thank the Microsoft Security Response Center; no actionable or detailed information is supplied.

    4015878.8K
    526 followersView on X
  • Cyber Advising@cyber_advising
    Disclosure

    CVE-2026-58532: tcpip.sys Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. https://aprl.pet/writing/cve-2026-58532 https://t.co/t1X8NkN2Kz

    Post summary

    The tweet announces a Windows kernel integer overflow vulnerability (CVE‑2026‑58532) that allows local privilege escalation, but offers no proof of concept, exploit code, or patch information.

    04138192.7K
    13.6K followersView on X
  • April@april_ivyyy
    General

    https://nvd.nist.gov/vuln/detail/cve-2026-58532 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58532 :)

    Post summary

    The provided text contains only links to external resources about CVE-2026-58532 without any direct information on PoC, exploits, active use, patches, or technical details.

    4203242.5K
    526 followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 July’s Windows update fixes a kernel flaw that can turn a local login into SYSTEM-level control. “Important” is Microsoft-speak for patch now, regret less later. https://windowsforum.com/threads/cve-2026-58532-install-july-updates-to-stop-windows-kernel-system-escalation.438844/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsSecurity #PrivilegeEscalation #PatchTuesday #Cve202658532 https://t.co/ywehHtc02r

    Post summary

    Microsoft’s July 2026 update addresses CVE‑2026‑58532, a kernel flaw that can elevate a local login to SYSTEM level; the post focuses on the patch release, with no mention of exploitation or PoC.

    0000047
    1.2K followersView on X
CPE platform detail13 entries

13 of 13 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1607---
OSmicrosoftwindows_10_1809---
OSmicrosoftwindows_10_21h2---
OSmicrosoftwindows_10_22h2---
OSmicrosoftwindows_11_24h2---
OSmicrosoftwindows_11_25h2---
OSmicrosoftwindows_11_26h1---
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2025---

Explore more