CVE-2026-24296

CVE-2026-24296 identifies a local privilege escalation vulnerability in the Windows Device Association Service, caused by a race condition (CWE-362). Rated High with a CVSS score of 7.0, successful exploitation requires an attacker to have low privileges and local access, but the attack complexity is high. This flaw could lead to a complete compromise of confidentiality, integrity, and availability of the affected system. Currently, there is no evidence of active exploitation in the wild, and no public exploit code or proof-of-concept modules are available. Community discussion and media coverage are minimal, reflecting a very low predicted probability of exploitation.