CVE-2026-19635
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with elevated privileges, without requiring further user or victim interaction.
Risk Assessment
An attacker with local access could gain full control of the system, potentially leading to data integrity and confidentiality breaches.
Recommendation
Restrict permissions on configuration files and apply vendor patches to prevent privilege escalation.
Original NVD description (English source)
A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with elevated privileges, without requiring further user or victim interaction.