ZDI-CAN-28792 HIGH 7.0 Upcoming Mar 02, 2026

Microsoft

Microsoft has a high-severity vulnerability (CVSS 7.0) that requires local access and low-level user privileges to exploit, with potential to compromise confidentiality, integrity, and availability of affected systems. The attack cannot be executed remotely and does not require user interaction, making it particularly concerning for insider threats or multi-stage attack scenarios. Security teams should monitor Microsoft security bulletins closely through June 2026 and prioritize patching once available, especially for systems with untrusted local users.

Advisory Details
Researcher Zeeshan Shaikh (@bugzzzhunter)
Reported March 02, 2026
Deadline June 30, 2026 75d
CVSS Vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy