All packages
Microsoft PowerToys vulnerabilities
3 known CVE vulnerabilities in Microsoft PowerToys, translated and rated.
- CVE-2026-96188High
A vulnerability involving external control of system or configuration settings in Microsoft PowerToys allows an authenticated attacker to elevate privileges locally. The flaw enables configuration manipulation by an unauthorized source.
- CVE-2026-83681Medium
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.
- CVE-2026-42902High
Improper authorization vulnerability in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

