ZDI-CAN-29184
HIGH 7.8
Upcoming
Mar 05, 2026
Microsoft
Microsoft has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit, but delivers complete system compromise through confidentiality, integrity, and availability breaches. The vulnerability affects Microsoft's widely deployed software ecosystem, making it relevant to most enterprise environments. Security teams should monitor for patches arriving by the July 2026 deadline and prioritize testing in their Microsoft-dependent infrastructure once remediation becomes available.
Advisory Details
Researcher
Amol Dosanjh, Dre Cura (@dre_cura), and Nicholas Zubrisky (@NZubrisky) of TrendAI Research
Reported
March 05, 2026
Deadline
July 03, 2026
78d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H