CVE-2026-42980
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
- Affected products
- Windows, Windows Nt Os Kernel
- Microsoft Windows 10 1607
- < 10.0.14393.9234
- Microsoft Windows 10 1809
- < 10.0.17763.8880
- Microsoft Windows 10 21h2
- < 10.0.19044.7417
- Microsoft Windows 10 22h2
- < 10.0.19045.7417
- Microsoft Windows 11 23h2
- < 10.0.22631.7219
- Microsoft Windows 11 24h2
- < 10.0.26100.8655
- Fix
- Available
- CVSS 3.1
- 7.8 HIGH
- EPSS
- 6.9% (94th percentile)
- Weakness
- CWE-122, CWE-191
- NVD status
- Analyzed
- Published
- 2026-06-09
CVE-2026-42980 at NVD
1 known exploit for CVE-2026-42980
Proof-of-concept code and exploit modules indexed by Sploitus