CVE-2026-69785

HighCVSS 7.8

Published: 08/09/2026(UTC)Updated: 24/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

37th percentile - higher than 37% of all known CVEs

Summary

An untrusted search path vulnerability in Windows Smart Card allows an authorized attacker to elevate privileges locally.

Risk Assessment

A local attacker could exploit the untrusted search path to run malicious code with elevated privileges, potentially leading to full system compromise.

Recommendation

Install the latest security updates for Windows.

Other vulnerabilities in Windows Smart Card

See all

CVE-2026-83584High
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-83579High
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS