September 20, 2026

CVE Watchtower

← Back to CVE List

CVE-2026-42980NVD

Description

Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
Severity Level
HIGH (7.8)
Published Date
09/06/2026
Last Modified
29/07/2026
Exploitation Status
????
EPSS Score
6.95% (percentile 93.8%)

CVSS Base Metrics

CVSS v3 (3.1)
HIGH 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-122CWE-191

Affected & Patched Versions

ProductAffected VersionsPatched Version
microsoft windows 10 1607< 10.0.14393.923410.0.14393.9234
microsoft windows 10 1607< 10.0.14393.923410.0.14393.9234
microsoft windows 10 1809< 10.0.17763.888010.0.17763.8880
microsoft windows 10 1809< 10.0.17763.888010.0.17763.8880
microsoft windows 10 21h2< 10.0.19044.741710.0.19044.7417
microsoft windows 10 21h2< 10.0.19044.741710.0.19044.7417
microsoft windows 10 21h2< 10.0.19044.741710.0.19044.7417
microsoft windows 10 22h2< 10.0.19045.741710.0.19045.7417
microsoft windows 10 22h2< 10.0.19045.741710.0.19045.7417
microsoft windows 10 22h2< 10.0.19045.741710.0.19045.7417
microsoft windows 11 23h2< 10.0.22631.721910.0.22631.7219
microsoft windows 11 23h2< 10.0.22631.721910.0.22631.7219
microsoft windows 11 24h2< 10.0.26100.865510.0.26100.8655
microsoft windows 11 24h2< 10.0.26100.865510.0.26100.8655
microsoft windows 11 25h2< 10.0.26200.865510.0.26200.8655
microsoft windows 11 25h2< 10.0.26200.865510.0.26200.8655
microsoft windows 11 26h1< 10.0.28000.226910.0.28000.2269
microsoft windows 11 26h1< 10.0.28000.226910.0.28000.2269
microsoft windows server 2012All versionsN/A
microsoft windows server 2012r2N/A
microsoft windows server 2016< 10.0.14393.923410.0.14393.9234
microsoft windows server 2019< 10.0.17763.888010.0.17763.8880
microsoft windows server 2022< 10.0.20348.525610.0.20348.5256
microsoft windows server 2025< 10.0.26100.3299510.0.26100.32995
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.

References