BaselineWatch
Desk

CVE-2026-62840

7.0 high SSVC exploitation: none Published

Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.

Fix

Microsoft's update · Critical

From the 2026-Oct release note of Microsoft's Security Update Guide, revised 2026-10-28 · Exploitation Less Likely.

Vendor advisories in the News 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 3

  1. StatusAwaiting Analysis → PublishedNVD modified 2026-10-19 19:39
  2. StatusReceived → Awaiting AnalysisNVD modified 2026-10-15 20:39
  3. First seenCVSS 7.0NVD modified 2026-10-13 22:17

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 1