CVE Catalog
CVE-2026-66804
HighCVSS 7.8Exploitation Probability (EPSS)
High risk3.42%
88th percentile - higher than 88% of all known CVEs
Summary
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could gain higher privileges on the system.
Recommendation
Install Windows updates that address this vulnerability.
Original NVD description (English source)
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.