EUVD-2026-73637
GHSA-6hh7-h956-4q53
Severity by source
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Vendor-supplied vector is well-grounded: local access required (AV:L), high privileges already needed (PR:H), reliable low-complexity exploit (AC:L), kernel scope change (S:C) yielding full C/I/A impact.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in Windows Advanced Local Procedure Call (ALPC) allows an attacker already holding high administrative privileges to further escalate to kernel-level or system-level access via untrusted pointer dereference (CWE-822). The vulnerability affects a wide sweep of Windows releases - from Windows 10 version 1809 through Windows 11 26H1 and Windows Server 2019 through Server 2025 - and is confirmed patched by Microsoft. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a local attacker who already holds high-privilege access on the target Windows system - the CVSS PR:H metric confirms this is not a remote or unauthenticated attack vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 8.2 reflects the scope-changed, high-impact nature of this privilege-escalation primitive offset by the requirement for local access with already-high privileges (PR:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update addressing CVE-2026-69874 through Windows Update, WSUS, or Microsoft Update Catalog; exact target build numbers per platform are listed under affected_products above. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows 10 (version 1809+), Windows 11, and Windows Server 2019-2025 systems and verify current patch levels against Microsoft's latest security bulletin. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-822 – Untrusted Pointer Dereference
View allShare
External POC / Exploit Code
Leaving vuln.today