EUVD-2026-73019
GHSA-5q4w-2j92-q4ww
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Local-only attack requiring a valid low-privilege session; integrity-only impact with no confidentiality or availability consequence matches the described tampering behavior.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
AnalysisAI
Local integrity tampering in the Windows Search Component (CWE-306, Missing Authentication for Critical Function) affects virtually all supported Windows releases - from Windows 10 1607 and Windows Server 2012 through Windows 11 26H1 and Windows Server 2025 - enabling a low-privileged, locally authenticated attacker to manipulate the component's behavior or data without passing an expected authentication gate. The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) confirms the impact is limited to integrity; no confidentiality or availability loss is expected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing authenticated local user session on the target system with at least low-privilege (standard user) rights, as confirmed by PR:L and AV:L in the CVSS vector - remote unauthenticated exploitation is not possible. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 5.5 Medium rating is credible and likely accurate given the local-only attack vector (AV:L) and low-privilege requirement (PR:L) - this is not remotely exploitable without first obtaining a local session. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update for each affected Windows version via Windows Update, Windows Server Update Services (WSUS), or Microsoft Update Catalog, targeting the minimum fixed builds listed in the MSRC advisory: Windows 10 21H2/22H2 to 10.0.19044.7725 / 10.0.19045.7725 or later, Windows 11 24H2/25H2 to 10.0.26100.9445 / 10.0.26200.9445 or later, Windows 11 26H1 to 10.0.28000.2954 or later, Windows Server 2025 to 10.0.26100.33438 or later, and corresponding builds for Server 2012 through Server 2022 as detailed at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69554. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today