CVE-2026-83681
MediumCVSS 5.5Summary
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.
Risk Assessment
An attacker may alter configuration or data in PowerToys, potentially leading to unauthorized system changes.
Recommendation
Update PowerToys to the latest version and enable stronger authentication mechanisms if available.
Other vulnerabilities in Microsoft PowerToys
See all- CVE-2026-96188High
A vulnerability involving external control of system or configuration settings in Microsoft PowerToys allows an authenticated attacker to elevate privileges locally. The flaw enables configuration manipulation by an unauthorized source.
- CVE-2026-42902High
Improper authorization vulnerability in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS