CVE-2026-49176
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could gain elevated privileges, potentially leading to theft of wallet data or other sensitive information.
Recommendation
Install the Windows security update available via Patch Tuesday.
Other vulnerabilities in Windows WalletService
See all- CVE-2026-20853High
A race condition vulnerability in Windows WalletService allows an unauthorized attacker to elevate privileges locally.
- CVE-2021-26885High
Elevation of privilege vulnerability in Windows WalletService. An attacker could exploit it to gain elevated privileges on the system.
- CVE-2021-26871High
Elevation of privilege vulnerability in Windows WalletService. An attacker could exploit it to gain elevated privileges on the system.
Original NVD description (English source)
Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.