Vulnerability

CVE-2026-81963

Descriptive record received from OpenCTI and minimised for consultation in the Intel portal.

Sharing: TLP:CLEAR
Confidence: 100
Source: The CVE Program
Updated: 26/09/2026 05:32

Description

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

STIX identifiervulnerability--4edc1c56-020d-5cbe-ac42-32249540cfb4

First observation-

Last observation-

Known relationships14

Aliases and classifications

CWE-284CWE-59Improper Link Resolution Before File Access ('Link Following')Improper access control

Minimised technical details

No raw data

cvss severity: HIGH
cisa kev: True
cvss vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
cvss score: 7.8

Provenance

Public references

Windows Update Stack Elevation of Privilege Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963

EudorIA correlation

Intel catalogue

The vulnerability is also available in the EudorIA editorial catalogue.

Open EudorIA analysis

Presence in OpenCTI describes an intelligence correlation and does not, by itself, constitute evidence of compromise, legal attribution or operational guidance applicable without context verification.