CVE Catalog

CVE-2026-62721

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.32%

25th percentile - higher than 25% of all known CVEs

Summary

Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with limited privileges could gain elevated privileges, potentially leading to system compromise or malware installation.

Recommendation

Apply the latest security updates provided by the operating system vendor.

Original NVD description (English source)

Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS