EUVD-2026-73343
GHSA-w69f-g69f-235j
Severity by source
AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Local-only vector confirmed; PR:H matches 'authorized attacker'; AC:H reflects non-trivial integer underflow exploitation; full C/I/A from SYSTEM-level privilege escalation outcome.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
6DescriptionCVE.org
Integer underflow (wrap or wraparound) in Windows File History Service allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in the Windows File History Service exploits an integer underflow (CWE-191) that allows an already-privileged local attacker to gain full system-level access on affected Windows 10, 11, and Server 2016/2019 builds. The CVSS vector (AV:L/AC:H/PR:H) reflects that exploitation requires both high local privileges and complex conditions, significantly tempering real-world threat despite the complete C/I/A impact values. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authorized attacker already holding high local privileges (PR:H) on the targeted Windows system - this vulnerability is strictly local (AV:L) and cannot be triggered remotely or by a standard unprivileged user account. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS base score of 6.4 accurately reflects a constrained risk profile: local attack vector (AV:L), high attack complexity (AC:H), and high privilege requirement (PR:H) collectively demand an attacker who already holds elevated local access and must satisfy specific, non-trivial exploitation conditions. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update bringing affected builds to or above the following fixed thresholds: Windows 10 1607 and Server 2016 to 10.0.14393.9512, Windows 10 1809 and Server 2019 to 10.0.17763.9245, Windows 10 21H2 to 10.0.19044.7725, Windows 10 22H2 to 10.0.19045.7725, Windows 11 23H2 to 10.0.22631.7582, Windows 11 24H2 to 10.0.26100.9445, Windows 11 25H2 to 10.0.26200.9445, and Windows 11 26H1 to 10.0.28000.2954. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-191 – Integer Underflow
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today