CVE-2026-21253CWE-416

Mailslot File System Elevation of Privilege Vulnerability

High · published February 10, 2026

CVSS v3.1
7.0
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

⚡ A classic case of 'use after free' strikes again! An authorized attacker can leverage this flaw in Mailslot File System to elevate their privileges locally. 🔥 Think of it like a restaurant that mistakenly lets a diner refill their drink with no supervision after they’ve finished their meal—without knowing it, they could access the kitchen and take whatever they wanted! If exploited, an attacker could gain elevated privileges, allowing them to execute arbitrary code or access sensitive information that should be off-limits. This scenario could lead to a complete compromise of the system, turning a trusted user into a potentially destructive force.

Put simply

Think of it like a restaurant that mistakenly lets a diner refill their drink with no supervision after they’ve finished their meal—without knowing it, they could access the kitchen and take whatever they wanted! This vulnerability arises from a 'use after free' condition in the Mailslot File System, where memory is freed but still accessible, allowing an attacker to manipulate program execution and gain higher privileges than intended.

What to do

If exploited, an attacker could gain elevated privileges, allowing them to execute arbitrary code or access sensitive information that should be off-limits. This scenario could lead to a complete compromise of the system, turning a trusted user into a potentially destructive force. To mitigate this vulnerability, ensure that all systems are updated to the latest patches as soon as they become available. Implement strict access controls and monitor user privileges to prevent unauthorized access. You've got this! Stay vigilant, update your systems, and keep those privileges in check! 🛡️

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00802 · 56.2th percentile
Weakness
CWE-416 · Use After Free
Published
2026-02-10T17:51Z
EPSS history
Timeline
  • 10 FEB 17:51Z
    Mailslot File System Elevation of Privilege Vulnerability
    cvelistv5