CVE-2026-72958 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.2 HIGH	LOCAL	LOW	HIGH	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Windows Releases

Platform

Version

Windows 11

24H2 (arm64, x64)	KB5124008
25H2 (arm64, x64)	KB5124008
26H1 (arm64, x64)	KB5124012

Windows Server 2025

Server Core	KB5122871
Standard	KB5122871

Common Weakness Enumeration

CWE-415 - Double Free
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

Vulnerability Media Exposure

[ENGLISH] Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days
Today is Microsoft's September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two actively exploited zero-day vulnerabilities. [...]
Published: 2026-09-08T14:18:05-04:00

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72958