CVE-2026-69453
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A missing authorization vulnerability in the Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
Risk Assessment
An attacker could modify data or configuration, potentially leading to a breach of system integrity.
Recommendation
Install Windows security updates and restrict access to the search component.
Other vulnerabilities in Windows Search Component
See all- CVE-2026-96911High
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-83850High
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS