CVEFinder.io

CVE-2026-58598

⚠️ high
🔍 Scan for this CVE
Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

CVSS Score
7.0
High
EPSS Score
0.2
Exploit Probability
Published Date
2026-07-16
First Seen: 2026-07-17
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 51.4% of all 340,405 vulnerabilities in our database.

#165,342
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 17, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-07-22
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-362 CWE-416

📦 Affected Products 5

Vendor Product Status Affected Versions
microsoft windows_10_21h2 Affected
< 10.0.19044.7548
microsoft windows_10_22h2 Affected
< 10.0.19045.7548
microsoft windows_11_24h2 Affected
< 10.0.26100.8875
microsoft windows_11_25h2 Affected
< 10.0.26200.8875
microsoft windows_11_26h1 Affected
< 10.0.28000.2525

🔗 References 1

https://msrc.microsoft.com/update-guide/vulnerabilit...
Patch Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-33842 🔶 medium 5.5 0.4 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis... 2026-07-14
CVE-2026-34328 🔶 medium 5.5 0.4 Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to dis... 2026-07-14
CVE-2026-34346 🔶 medium 5.5 0.2 Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized at... 2026-07-14
CVE-2026-34348 🔶 medium 6.5 0.7 Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over... 2026-07-14
CVE-2026-34349 🔶 medium 5.5 0.4 Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose in... 2026-07-14
CVE-2026-40378 ⚠️ high 7.5 0.8 Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unau... 2026-07-14
These CVEs affect the same products