CVE-2026-105725: Microsoft Windows Security App

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Windows Security App: from 1000.0.0.0, before 1000.27840.1000.0 (fixed in 1000.27840.1000.0)

Published 2026-10-13. Last modified 2026-10-13.