CVE-2026-108471

Summary

A local attacker with authorized access can exploit an untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave to elevate privileges. This vulnerability allows an authenticated user to gain higher privileges on the system.

Exploitability

Exploitation requires local access and a valid user account, making it moderately difficult but possible for attackers who already have authorized access to the system.

Blast radius

If exploited, this vulnerability could allow attackers to gain SYSTEM-level privileges on Windows systems with VBS enabled, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the latest Windows updates that include the fix for CVE-2026-108471, specifically the May 2026 security updates.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.