AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-62908

HIGH · CVSS 7 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-08-11 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

A race condition in the Windows Backup Engine allows authorized attackers to exploit improper synchronization of shared resources, potentially leading to local privilege escalation. This vulnerability poses a significant risk to systems running Windows, particularly in environments where users have elevated access. Organizations using Windows should prioritize patching this vulnerability to mitigate the risk of unauthorized access and control.

CVE
CVE-2026-62908
Severity
HIGH
CVSS
7
EPSS
0.15%
Windows

Original NVD Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)