CVE-2026-97812 | Microsoft Windows up to Server 2025 Windows Update Orchestrator Service double free

October 14, 2026 Yanac

A vulnerability described as very critical has been identified in Microsoft Windows up to Server 2025. This vulnerability affects unknown code of the component Windows Update Orchestrator Service. Such manipulation leads to double free.

This vulnerability is traded as CVE-2026-97812. An attack has to be approached locally. There is no exploit available.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More