CVE-2026-87709
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally. The vulnerability affects the integrity of protected resources.
Risk Assessment
An attacker with valid credentials could locally modify data or service configuration, potentially compromising the integrity of the environment. However, prior local access to the system is required.
Recommendation
Install Microsoft security updates for Windows Host Guardian Service as soon as possible and restrict local access to trusted accounts.
Other vulnerabilities in Windows Host Guardian Service
See all- CVE-2026-96248High
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.
- CVE-2026-88072High
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69682High
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS