Security Advisory

CVE-2026-21240

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-10 17:51:44

Last updated 2026-05-11 21:25:44

Assigner microsoft

State PUBLISHED

Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.