CVE-2026-21221CWE-362CWE-416

CVE-2026-21221

High · published January 13, 2026

CVSS v3.1
7.0
EPSS
0%
Percentile
14.2
In the wild
Unconfirmed
What it is

⚡ A sneaky race condition is lurking in the Capability Access Management Service! This flaw could allow an authorized attacker to elevate their privileges without breaking a sweat! 🔥 Think of it like a construction site where two workers are trying to grab the same toolbox at the same time. If one slips in ahead of the other, they could access tools meant for the foreman, completely unchecked! If exploited, an attacker could gain unauthorized access to sensitive functions and data, potentially altering system configurations or compromising security settings. This could lead to a complete breach of the local environment and put the entire system at risk.

Put simply

Think of it like a construction site where two workers are trying to grab the same toolbox at the same time. If one slips in ahead of the other, they could access tools meant for the foreman, completely unchecked! This vulnerability arises from improper synchronization in concurrent execution within the Capability Access Management Service (camsvc). It allows an authorized attacker to manipulate access controls through a race condition, leading to privilege escalation.

What to do

If exploited, an attacker could gain unauthorized access to sensitive functions and data, potentially altering system configurations or compromising security settings. This could lead to a complete breach of the local environment and put the entire system at risk. To mitigate this risk, patch the system to the latest version immediately. Review and enhance synchronization mechanisms in your code to ensure that resource access is properly managed. Regularly audit permissions for sensitive functions to ensure unauthorized access is minimized. You've got this! With these steps, you can secure your environment against this vulnerability and maintain your superhero status! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.2th percentile
Weaknesses
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'); CWE-416 · Use After Free
Published
2026-01-13T23:16Z
Affected products (5)
ProductVersionsFixed in
microsoft/windows_11_24h2< 10.0.26100.762310.0.26100.7623
microsoft/windows_11_24h2< 10.0.26100.762310.0.26100.7623
microsoft/windows_11_25h2< 10.0.26200.762310.0.26200.7623
microsoft/windows_11_25h2< 10.0.26200.762310.0.26200.7623
microsoft/windows_server_2025< 10.0.26100.3223010.0.26100.32230
References (1)
EPSS history
Timeline
  • 13 JAN 17:56Z
    Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
    cvelistv5