Windows Health and Optimized Experiences Service vulnerabilities

3 known CVE vulnerabilities in Windows Health and Optimized Experiences Service, translated and rated.

CVE-2026-96183Medium
Missing authentication for a critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
CVE-2026-85884High
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
CVE-2025-59241High
Improper link resolution before file access ('link following') exists in Windows Health and Optimized Experiences Service. An authorized attacker can exploit this to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS