CVE-2026-103554
CVE-2026-103554 · Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVSS 7.0 · High · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
windows 10 version 1809
- Versions
- ≥ 10.0.17763.0, < 10.0.17763.9376: Affected (custom)
Update to 10.0.17763.9376
windows 10 version 21h2
- Versions
- ≥ 10.0.19044.0, < 10.0.19044.7807: Affected (custom)
Update to 10.0.19044.7807
windows 10 version 22h2
- Versions
- ≥ 10.0.19045.0, < 10.0.19045.7807: Affected (custom)
Update to 10.0.19045.7807
windows 11 version 23h2
- Versions
- ≥ 10.0.22631.0, < 10.0.22631.7652: Affected (custom)
Update to 10.0.22631.7652
windows 11 version 24h2
- Versions
- ≥ 10.0.26100.0, < 10.0.26100.9711: Affected (custom)
Update to 10.0.26100.9711
windows 11 version 25h2
- Versions
- ≥ 10.0.26200.0, < 10.0.26200.9711: Affected (custom)
Update to 10.0.26200.9711
windows 11 version 26h1
- Versions
- ≥ 10.0.28000.0, < 10.0.28000.3231: Affected (custom)
Update to 10.0.28000.3231
windows 11 version 26h2
- Versions
- ≥ 10.0.26300.0, < 10.0.26300.9711: Affected (custom)
Update to 10.0.26300.9711
windows server 2019
- Versions
- ≥ 10.0.17763.0, < 10.0.17763.9376: Affected (custom)
Update to 10.0.17763.9376
windows server 2019 (server core installation)
- Versions
- ≥ 10.0.17763.0, < 10.0.17763.9376: Affected (custom)
Update to 10.0.17763.9376