CVE-2026-70212
HighCVSS 7.0Summary
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the vulnerability to communicate with unauthorized endpoints, potentially leading to privilege escalation.
Recommendation
Apply security updates and restrict access to Security Center to trusted processes.
Other vulnerabilities in Windows Security Center
See all- CVE-2026-71347Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.
- CVE-2026-77899High
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS