EUVD-2026-73615
GHSA-6c3m-wqv6-5www
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local low-privilege access with no complexity or interaction required; full system impact achievable via DLL hijacking before legitimate load.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
AnalysisAI
Privilege escalation via untrusted search path (CWE-426) in the Windows Smart Card subsystem affects a broad range of Windows client and server releases, from Windows 10 1607 through Windows 11 26H1 and Windows Server 2012 through 2025. An authenticated local attacker with low-privilege access can manipulate the DLL/executable search path used by Smart Card components to load and execute attacker-controlled code, achieving full confidentiality, integrity, and availability compromise of the affected system. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated local session on the affected Windows system with at least low-privilege user rights (PR:L per CVSS). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 7.8 (High) is consistent with the attack profile: local access with low privileges, no complexity, full system impact upon successful exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update released for this vulnerability, which patches all affected Windows versions to the fixed build numbers listed above. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit your environment to identify all Windows 10, Windows 11, and Windows Server systems (2012 through 2025), particularly those with Smart Card authentication or MFA enabled, and assess which are accessible to domain users. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-426 – Untrusted Search Path
View allShare
External POC / Exploit Code
Leaving vuln.today