CVE-2026-108134

No fix known EPSS <1%CVSS 7.0

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Published 2026-10-13 · CVE record · OSV

Products: Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 Version 26H2