CVE-2026-40369
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- Affected products
- Windows, Windows Kernel
- Microsoft Windows 11 24h2
- < 10.0.26100.8390
- Microsoft Windows 11 25h2
- < 10.0.26200.8390
- Microsoft Windows 11 26h1
- < 10.0.28000.2113
- Microsoft Windows Server 2025
- < 10.0.26100.32772
- Fix
- Available
- CVSS 3.1
- 7.8 HIGH
- EPSS
- 4.7% (91th percentile)
- Weakness
- CWE-822
- NVD status
- Modified
- Published
- 2026-05-12
CVE-2026-40369 at NVD
10 known exploits for CVE-2026-40369
Proof-of-concept code and exploit modules indexed by Sploitus