CVE-2026-34334

HIGH

KISA

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

StatusAnalyzed

설명

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Score Summary

CVSS Score: 7.8
Version: 3.1
VPI: 78
Why this VPI (explainable, experimental)
VPI breakdown
Impact 78.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 78.00
VPI formula vpi-v1
EPSS: 0.2%
(상위 4.95%)
Attack Vector: Local Access
Low Complexity
Low Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 05/12/2026(2 months ago)
Modified: 05/14/2026(2 months ago)
Source: NVD, KISA
Products: 14

Listed in KISA bulletin

This CVE is referenced in a KISA security bulletin (Korean only).

Bulletin ID: 72051
Published: 2026-05-13

boho.or.kr

Vulnerability Lifecycle

NVDPublished05/12/2026
KISAKISA Listed05/13/2026
NVDLast Modified

CWE Weakness Classification

CWE-362
NVD
Primary

References (1)

NVD
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34334

Affected Products (14)

05/14/2026

Impact	78.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	78.00