Skip to main content

CVE-2026-45653

Windows Kernel Elevation of Privilege vulnerability

Microsoft

MSRC advisory June 9, 2026

Alert details

Source feed
Microsoft MSRC
CVE ID
CVE-2026-45653
Affected products
Windows Kernel Elevation of Privilege · Microsoft Windows Kernel Elevation of Privilege · Microsoft

What happened

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

What it means for your business

Windows Kernel Elevation of Privilege vulnerability (CVE-2026-45653) was added to Microsoft’s security update guidance. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.

Sources

Related briefs

Microsoft MSRC

CVE-2026-50332

Windows Kernel Elevation of Privilege vulnerability

Windows Kernel Elevation of Privilege vulnerability (CVE-2026-50332) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

CriticalMicrosoft MSRC

CVE-2026-96207

Microsoft Partner Center Elevation of Privilege vulnerability

Microsoft Partner Center Elevation of Privilege vulnerability (CVE-2026-96207) was added to Microsoft’s security update guidance. <p>Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.

CriticalMicrosoft MSRC

CVE-2026-94510

Microsoft Bookings Elevation of Privilege vulnerability

Microsoft Bookings Elevation of Privilege vulnerability (CVE-2026-94510) was added to Microsoft’s security update guidance. <p>Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.</p> If you need help checking exposure, call (864) 335-9223.

CriticalMicrosoft MSRC

CVE-2026-88131

Microsoft Dataverse Remote Code Execution vulnerability

Microsoft Dataverse Remote Code Execution vulnerability (CVE-2026-88131) was added to Microsoft’s security update guidance. <p>Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.</p> If you need help checking exposure, call (864) 335-9223.

Need help patching?

PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.