## Summary
CVE-2026-65778 is a Windows Autopilot vulnerability involving a use-after-free condition (CWE-416). The NVD description states that an authorized attacker can leverage it to elevate privileges locally.
## Technical Details
- Vulnerability type: Use after free (CWE-416)
- Affected component: Windows Autopilot (per NVD description)
- Attack vector: LOCAL
- Privilege impact: local privilege elevation (C:H, I:H, A:H per provided CVSS metrics)
- Required access level: PR:L (attacker is already able to act with some level of access)
- Complexity: AC:H (higher attack complexity)
## Affected
- Windows Autopilot (specific product versions not provided in the available content)
## Impact
- Potential for local privilege escalation by an attacker with authorization (PR:L)
- Resulting impact includes confidentiality, integrity, and availability impact (C:H/I:H/A:H per provided CVSS metrics)
## Mitigation
1. Apply vendor security updates/patches for Windows Autopilot as they become available (no patch version details were provided in the available content).
2. Reduce the likelihood of an “authorized attacker” scenario by tightening local access controls and auditing Autopilot-related administrative actions.
3. Monitor for suspicious local activity consistent with privilege changes, especially from accounts with Autopilot management permissions (exact detection indicators not provided).
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416