CVE Catalog
CVE-2026-55144
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.
Risk Assessment
The risk involves potential compromise of cryptographic data integrity by an authorized user, which could lead to unauthorized system modifications.
Recommendation
It is recommended to immediately apply the security update from Microsoft for Windows CryptoAPI and monitor systems for unauthorized changes.
Other vulnerabilities in Windows CryptoAPI
Original NVD description (English source)
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.