Skip to content
MicrosoftCVE-2026-58598

Microsoft Windows Backup Engine: race condition

High7.0CVE-2026-58598 · Published Jul 16, 2026 · updated Jul 22, 2026

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Microsoft advisory

Affected versions

PackageAffectedFixed in
Windows 10 Version 21H2
Product
>= 10.0.19044.0, < 10.0.19044.754810.0.19044.7548
Windows 10 Version 22H2
Product
>= 10.0.19045.0, < 10.0.19045.754810.0.19045.7548
Windows 11 Version 24H2
Product
>= 10.0.26100.0, < 10.0.26100.887510.0.26100.8875
Windows 11 Version 25H2
Product
>= 10.0.26200.0, < 10.0.26200.887510.0.26200.8875
Windows 11 version 26H1
Product
>= 10.0.28000.0, < 10.0.28000.252510.0.28000.2525
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-362, CWE-416

More Microsoft advisories

All Microsoft
Advisory
Microsoft Edge (Chromium-based): authentication bypass
Medium5.4Jul 17
Microsoft Windows RDP: unauthorized attacker could disclose information over
High7.1Jul 17
Microsoft Windows Admin Center: cross-site scripting
Medium6.1Jul 16
Microsoft Windows Terminal App: integer overflow
High7.5Jul 16
Microsoft Office SharePoint: cross-site scripting
Medium4.6Jul 16
Secret exfiltration vulnerability
HighJul 14

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.