ChangeIntelIT change radar
Public mode

No tenant, Graph, or device access. Every item links to its source. What this means

Some sources or documents need attention: 254/255 feeds/APIs · 0/409 docs · checked 19:01 UTC Customize Public modeDiscuss ChangeIntel on Discord

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Assessment

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Severity
Important
CVSS base score
7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Impact
Elevation of Privilege
EPSS, next 30 days
Not scored yet
Public exploit code
No Nuclei template lists it
Exploitability
Exploitation Less Likely
Publicly disclosed
No
Customer action
Required: apply the update
Component
Windows Broadcast DVR User Service
Weakness
CWE-416: Use After Free
Issued by
Microsoft
Published
13 Oct 2026 · October 2026
Last revised
13 Oct 2026
CVSS 3.1 base metricsRed raises the risk · green lowers it
Attack vector
LocalAV:L
Attack complexity
HighAC:H
Privileges required
LowPR:L
User interaction
NoneUI:N
Scope
UnchangedS:U
Confidentiality
HighC:H
Integrity
HighI:H
Availability
HighA:H

Updates that fix it

3 KBs
KBTypeRestartApplies toOther CVEs
KB5126653 Security UpdateRequiredWindows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based SystemsAll CVEs in KB5126653
KB5127646 Security UpdateRequiredWindows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based SystemsAll CVEs in KB5127646
KB5127648 Security UpdateRequiredWindows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 3 moreAll CVEs in KB5127648

Affected products

Windows

What changed

First observed 14 Oct 2026

No field changes in the recorded history.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 14 Oct 19:01 UTC · 254 of 255 readable · 253 fully read · documentation 0/409 current