CVE Catalog

CVE-2026-70580

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Summary

Missing authentication for a critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.

Risk Assessment

An attacker with local access could impersonate another account or service, potentially bypassing credential protection mechanisms.

Recommendation

Apply Microsoft security updates for Windows Credential Guard and restrict local access to trusted users.

Other vulnerabilities in Windows Credential Guard

See all
Original NVD description (English source)

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS