EUVD-2026-73427
GHSA-rgr8-ghq8-v5gj
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local vector with low-privilege trigger; no user interaction or special conditions; full CIA impact consistent with privilege escalation to SYSTEM.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
5DescriptionCVE.org
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
AnalysisAI
Privilege escalation in Microsoft Standard XPS (XML Paper Specification) on Windows allows a low-privileged local attacker to gain full system access via an integer underflow (CWE-191) that triggers memory corruption. The flaw affects a broad swath of Windows releases from Server 2012 through Windows 11 26H1. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a local, low-privileged authenticated session on the target Windows host - this includes standard domain users with interactive logon or Remote Desktop Protocol access. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H scores 7.8 and represents a realistic, actionable risk: any standard (non-admin) user logged on locally or via RDP can trigger the underflow without any additional interaction or special configuration. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply Microsoft's cumulative updates for the respective Windows version via Windows Update or WSUS - the patch is available per vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69269. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct an inventory of Windows systems running Server 2012 through Windows 11 26H1 across all environments, prioritizing domain controllers and systems with access to sensitive data. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-191 – Integer Underflow
View allShare
External POC / Exploit Code
Leaving vuln.today