CVE-2026-21240

Publication date

2026-02-10 17:51:44

Family

microsoft

State

PUBLISHED

Description

Time-of-check time-of-use (toctou) race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.