CVE-2026-32219 HIGH

CVE-2026-32219: Microsoft Brokering File System Elevation of Privilege Vulnerability

Vendor Microsoft
Product Windows 11 Version 24H2
Weakness CWE-415
Published April 14, 2026
Last update June 1, 2026
View on NVD All CVEs

CVSS base score

7.0/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

What the vulnerability does

01Description

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

Key dates

02Disclosure timeline

April 14, 2026 CVE published
June 1, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2020-1647 Junos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabled CVE-2023-4256 Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c CVE-2024-20498 CVE-2019-11049 mail() may release string with refcount==1 twice CVE-2021-34734 Cisco Video Surveillance 7000 Series IP Cameras Link Layer Discovery Protocol Double-Free Denial of Service Vulnerability