Microsoft Windows Backup Engine Race Condition Vulnerability Allowing Privilege Escalation

Vulnerability

A race condition vulnerability has been identified in the Windows Backup Engine, allowing an authorized attacker to elevate privileges locally. This issue arises from concurrent execution using shared resources without proper synchronization.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5101649 and KB5099539.

Added: Jul 16, 2026, 10:40 PM
Updated: Jul 16, 2026, 10:40 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
2.9
remediation
7.7
relevance
9.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.