fr Sign in

7.8 High

CVE-2026-57968 Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally

Description

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Affected products and versions

Product	Affected versions	Fixed in
Windows Subsystem for Linux (WSL2) 2.7	earliest → < 2.7.8	2.7.8

References

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability msrc.microsoft.com

Timeline

Published July 14, 2026
Last modified November 1, 2026

The 8 CVEs of Windows Subsystem for Linux (WSL2) →

CVE-2026-102204 Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized… 7.8 High CVE-2026-96206 Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information… 6.5 Medium CVE-2026-85879 Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to… 7.0 High CVE-2026-57973 Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to… 6.3 Medium

Track this CVE