CVE-2026-42989
HighCVSS 7.8Exploitation Probability (EPSS)
High risk81th percentile - higher than 81% of all known CVEs
Summary
Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker can gain elevated privileges on the system, potentially leading to compromise of sensitive resources.
Recommendation
Apply the security update from Microsoft for the Winlogon component.
Other vulnerabilities in Winlogon
See all- CVE-2026-25187High
Improper link resolution before file access in Winlogon allows an authorized attacker to elevate privileges locally.
- CVE-2026-61939High
Use after free in Winlogon allows an authorized attacker to elevate privileges locally.
- CVE-2024-30067Medium
A vulnerability in Winlogon allows elevation of privilege in Windows systems. An attacker could exploit this flaw to gain higher privileges on the device.
- CVE-2024-30066Medium
A vulnerability in the Winlogon component of Windows allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.
Original NVD description (English source)
Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.