EUVD-2026-73765
GHSA-c552-g2c6-3m2w
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local attack requiring only a standard authenticated user account; no special conditions; full system compromise upon successful privilege escalation to SYSTEM via DsSvc.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in the Windows Data Sharing Service Client (DsSvc) enables a low-privileged authenticated local user to gain SYSTEM-level access across a sweeping range of Windows 10, Windows 11, and Windows Server releases. The root cause is CWE-862 (Missing Authorization): the service client fails to enforce authorization checks on operations that should be restricted to higher-privilege callers, allowing a standard user account to invoke privileged service operations without additional conditions. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid, low-privilege authenticated user account (standard OS login) on an affected Windows system - no special features, non-default service configurations, or elevated rights are needed beyond a standard local or domain user session. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.8 score accurately reflects a classic local privilege escalation: exploitation requires only a foothold as a standard authenticated user, after which full SYSTEM-level compromise follows with low complexity and no user interaction needed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update that brings affected systems to or above the fixed build versions listed in the affected products section. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows 10, Windows 11, and Windows Server systems across your environment and flag critical infrastructure for priority patching. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allShare
External POC / Exploit Code
Leaving vuln.today