ZDI-CAN-29184 HIGH 7.8 Upcoming Mar 05, 2026

Microsoft

Microsoft has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit, but delivers complete system compromise through confidentiality, integrity, and availability breaches. The vulnerability affects Microsoft's widely deployed software ecosystem, making it relevant to most enterprise environments. Security teams should monitor for patches arriving by the July 2026 deadline and prioritize testing in their Microsoft-dependent infrastructure once remediation becomes available.

Advisory Details
Researcher Amol Dosanjh, Dre Cura (@dre_cura), and Nicholas Zubrisky (@NZubrisky) of TrendAI Research
Reported March 05, 2026
Deadline July 03, 2026 78d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy