CVE-2026-81963

Windows Update Stack Elevation of Privilege Vulnerability

En bref

Sévérité: HIGH 7.8
Exploitation: Exploitation connue (CISA KEV) · ajoutée le 2026-09-08
Exploitée selon l'ENISA depuis le 2026-09-08
EPSS: EPSS 0.39 % · centile 33 (2026-10-27)
État: PUBLISHED
Publiée: 2026-09-08
Mise à jour: 2026-10-14
Attribuée par: microsoft
Statut NVD: Analyzed

Description

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	HIGH 7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C	microsoft
CVSS 3.1	HIGH 7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	NVD · secure@microsoft.com (Secondary)

Faiblesses (CWE)

Références européennes

ENISA EUVD · EUVD-2026-73889
GCVE · GCVE-0-2026-81963

Avis du CERT-FR

CERTFR-2026-AVI-1147 — Multiples vulnérabilités dans Microsoft Windows · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:* < 10.0.22631.7582
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:* < 10.0.22631.7582
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:* < 10.0.26100.9445
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:* < 10.0.26100.9445
cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:* < 10.0.26200.9445
cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:* < 10.0.26200.9445
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:* < 10.0.28000.2954
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:* < 10.0.28000.2954
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* < 10.0.26100.33438

Produits affectés

Produit	Versions
Microsoft · Windows 11 version 23H2	affected 10.0.22631.0 < 10.0.22631.7582
Microsoft · Windows 11 Version 23H2	affected 10.0.22631.0 < 10.0.22631.7582
Microsoft · Windows 11 Version 24H2	affected 10.0.26100.0 < 10.0.26100.9445
Microsoft · Windows 11 Version 25H2	affected 10.0.26200.0 < 10.0.26200.9445
Microsoft · Windows 11 version 26H1	affected 10.0.28000.0 < 10.0.28000.2954
Microsoft · Windows Server 2025	affected 10.0.26100.0 < 10.0.26100.33438
Microsoft · Windows Server 2025 (Server Core installation)	affected 10.0.26100.0 < 10.0.26100.33438

Références

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
CISA Known Exploited Vulnerabilities	CC0 1.0
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD