CVE-2026-69717
HighCVSS 8.0Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
Risk Assessment
Risk of remote privilege escalation in domain environments, potentially leading to security policy violations and control over workstations.
Recommendation
Install security updates for Windows Group Policy and monitor network traffic for suspicious requests.
Other vulnerabilities in Windows Group Policy
See all- CVE-2026-50391High
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
- CVE-2023-36889Medium
A vulnerability in the Windows Group Policy security feature allows for security mechanism bypass. This could lead to unauthorized access to system resources.
- CVE-2022-41086Medium
Windows Group Policy Elevation of Privilege Vulnerability.
- CVE-2022-37992High
A vulnerability in Windows Group Policy allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS