SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-70283

HIGH · CVSS 7 EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability in the Windows Win32K component allows authorized attackers to exploit incorrect authorization mechanisms to elevate their privileges locally. This could enable them to gain unauthorized access to sensitive system resources and execute arbitrary code with elevated permissions. Organizations using affected Windows systems should prioritize patching this vulnerability to mitigate potential exploitation risks.

CVE
CVE-2026-70283
Severity
HIGH
CVSS
7
EPSS
0.22%
Windows

Original NVD Description

Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)