CVE-2026-81963 – Windows Update Stack Elevation of Privilege Vulnerability
CVSS 7.8
IMPORTANT
Zero Day – Immediate Deployment
“This Windows Update Stack flaw is already being exploited, and a low-privilege attacker can turn local access into SYSTEM-level control.”
CVE-2026-81963 is an elevation of privilege vulnerability in the Windows Update Stack caused by improper link resolution before file access and improper access control. A local attacker with low privileges could exploit the weakness to gain SYSTEM privileges. Microsoft reports that exploitation has already been detected.
Key Details
- Affected Product
- Microsoft Windows 11 23h2
- Attack Vector
- Local
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-59
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.