CVE-2026-69907

HighCVSS 7.8

Published: 08/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

21th percentile - higher than 21% of all known CVEs

Summary

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.

Risk Assessment

An authorized user could exploit this flaw to gain higher privileges, potentially leading to system security compromise.

Recommendation

Install security updates and verify permission configuration in Enterprise App Management.

Other vulnerabilities in Windows Enterprise App Management

See all

CVE-2026-69452High
Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
CVE-2026-69481High
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

Original NVD description (English source)

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS