Status: UPDATED | Advisory ID: CVE-2026-27909
| CVE | CVE-2026-27909 |
| CVSS | CVSS 7.8 (High). |
| Affected products | see table below |
| Classified as | CWE-416 (Use After Free) |
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-27909 |
| Vendor advisory | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27909 |