CVE-2026

Back Api.Msrc.Microsoft

CVE-2026

Api.Msrc.Microsoft • March 10, 2026

Share: View original

Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2026: Local Privilege Escalation Vulnerabilities in Microsoft Services Two separate vulnerabilities, CVE-2026, have been identified in Microsoft's Connected Devices Platform Service and Broadcast DVR. Both vulnerabilities allow authorized attackers to elevate privileges locally, posing a significant risk to affected systems. 2 sources 58

Extracted Entities

Attack Types (1)

Zero-day Exploit

MITRE ATT&CK (1)

T1068 - Exploitation for Privilege Escalation

Platforms (1)