CVE-2026-96858

27th percentile - higher than 27% of all known CVEs

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. The flaw involves insufficient identity verification when accessing critical functions.

An authenticated user could locally modify security account data, potentially leading to privilege escalation or system integrity compromise.

Apply security updates for the Windows Security Account Manager as soon as possible and restrict access to critical system functions.