CVE-2026-70235
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
Risk Assessment
An attacker with valid credentials could locally impersonate a trusted component or process, potentially bypassing access controls and falsifying event logs.
Recommendation
Apply Microsoft security updates for Windows and restrict local access to trusted users.
Other vulnerabilities in Windows Event Tracing
See all- CVE-2021-34486HighActively exploited
An elevation of privilege vulnerability in Windows Event Tracing.
- CVE-2026-83874High
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
- CVE-2026-83836High
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
- CVE-2026-83707High
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
- CVE-2026-70134High
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
- CVE-2021-38630High
Elevation of privilege vulnerability in Windows Event Tracing. An attacker could exploit it to gain higher privileges on the system.
- CVE-2021-36964High
Vulnerability in Windows Event Tracing allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
- CVE-2021-26425High
Elevation of Privilege vulnerability in Windows Event Tracing. Allows an attacker to gain higher privileges.
- CVE-2021-26898High
An elevation of privilege vulnerability exists in Windows Event Tracing. The description lacks technical details, but the vulnerability could allow an attacker to gain elevated privileges on the system.
- CVE-2021-26872High
Elevation of privilege vulnerability in Windows Event Tracing.
Original NVD description (English source)
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS