ZDI-CAN-28792
HIGH 7.0
Upcoming
Mar 02, 2026
Microsoft
Microsoft has a high-severity vulnerability (CVSS 7.0) that requires local access and low-level user privileges to exploit, with potential to compromise confidentiality, integrity, and availability of affected systems. The attack cannot be executed remotely and does not require user interaction, making it particularly concerning for insider threats or multi-stage attack scenarios. Security teams should monitor Microsoft security bulletins closely through June 2026 and prioritize patching once available, especially for systems with untrusted local users.
Advisory Details
Researcher
Zeeshan Shaikh (@bugzzzhunter)
Reported
March 02, 2026
Deadline
June 30, 2026
75d
CVSS Vector
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H