CVE-2026-96243
HighCVSS 7.8Summary
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit file links to gain administrative rights, potentially leading to full system compromise.
Recommendation
Install security updates for Windows WalletService. Restrict local access to trusted users.
Other vulnerabilities in Windows WalletService
See all- CVE-2026-49176High
Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.
- CVE-2026-20853High
A race condition vulnerability in Windows WalletService allows an unauthorized attacker to elevate privileges locally.
- CVE-2021-26885High
Elevation of privilege vulnerability in Windows WalletService. An attacker could exploit it to gain elevated privileges on the system.
- CVE-2021-26871High
Elevation of privilege vulnerability in Windows WalletService. An attacker could exploit it to gain elevated privileges on the system.
Original NVD description (English source)
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS