CVE Catalog
CVE-2026-70580
HighCVSS 8.8Summary
Missing authentication for a critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
Risk Assessment
An attacker with local access could impersonate another account or service, potentially bypassing credential protection mechanisms.
Recommendation
Apply Microsoft security updates for Windows Credential Guard and restrict local access to trusted users.
Other vulnerabilities in Windows Credential Guard
See allOriginal NVD description (English source)
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

