CVE-2026-56198
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
Risk Assessment
Privilege escalation could allow an attacker to access system data and compromise security.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Microsoft Trace Data Helper
See all- CVE-2026-70261Medium
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
- CVE-2026-70260Medium
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS