Vulnerabilities

CVSS

7.8 High

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Risk score

62.4

Published

2026-08-11

Status

Analyzed

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.

Weaknesses

CWE-306

Coverage 1

threat-intel

Multiples vulnérabilités dans Microsoft Windows (12 août 2026)

Multiple vulnerabilities have been discovered in Microsoft Windows, including remote code execution, privilege escalation, and denial-of-service attacks. Microsoft indicates that vulnerability CVE-2026-42976 is actively…

CERT-FR · Aug 12, 2026 High

CVE-2026-68820CVE-2026-42976CVE-2026-49179vulnerabilityremote code executionprivilege escalation

All articles mentioning it

Advisories and references

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42976