CVE-2026-42976

HighCVSS 7.8

Published: 11/08/2026(UTC)Updated: 16/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Missing authentication for a critical function in the Windows RPC API allows an authorized attacker to elevate privileges locally.

Risk of privilege escalation in Windows, potentially leading to full system compromise by an authorized user.

Apply security updates provided by the Windows vendor and restrict access to the RPC API to trusted entities.

Original NVD description (English source)

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.