Spoofing Vulnerability in Windows Remote Help Defense by Microsoft
CVE-2026-55013

7.1HIGH

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
20 August 2026

What is CVE-2026-55013?

A vulnerability exists in Windows Remote Help Defense due to an uncontrolled search path element, allowing an authorized attacker to execute spoofing attacks locally. This weakness can be exploited, potentially undermining the security of the affected system. Users are advised to apply available patches and follow security best practices to mitigate risk. For detailed information, refer to the Microsoft advisory.

Affected Version(s)

Windows Remote Help 5.0.0.0 < 5.2.1040.0

References

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.