PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-42984 Microsoft CVE debrief

CVE-2026-42984 is a high-severity vulnerability in the Windows Kernel that allows an authorized attacker to elevate privileges locally. This use-after-free vulnerability has a CVSS score of 7 and a CVSS severity of HIGH. The vulnerability was published on 2026-06-09T17:17:14.347Z and modified on 2026-06-10T19:37:03.870Z.

Vendor
Microsoft
Product
Windows 10 Version 1809
CVSS
HIGH 7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-06-10
Advisory published
2026-06-09
Advisory updated
2026-06-10

Who should care

Administrators and users of Microsoft Windows operating systems should be aware of this vulnerability, especially those with elevated privileges.

Technical summary

The vulnerability is a use-after-free issue in the Windows Kernel, which allows an authorized attacker to elevate privileges locally. The CVSS vector for this vulnerability is CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Defensive priority

HIGH

Recommended defensive actions

  • Apply patches from Microsoft as soon as possible.
  • Review and update Windows operating systems to the latest versions.
  • Implement additional security measures to restrict local access to sensitive areas of the system.

Evidence notes

The vulnerability affects multiple versions of Windows 10, Windows 11, and Windows Server. A list of affected versions can be found in the CVE details.

Official resources

CVE-2026-42984 was published on 2026-06-09T17:17:14.347Z and modified on 2026-06-10T19:37:03.870Z.