Microsoft Cryptographic Services Elevation of Privilege Vulnerability
CVE-2026-44810

8.4HIGH

What is CVE-2026-44810?

Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.

Affected Version(s)

Windows 11 version 23H2 ARM64-based Systems 10.0.22631.0 < 10.0.22631.7219

Windows 11 Version 23H2 x64-based Systems 10.0.22631.0 < 10.0.22631.7219

Windows 11 Version 24H2 ARM64-based Systems 10.0.26100.0 < 10.0.26100.8655

References

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.