CVE-2026-26170

Status: UPDATED  |  Advisory ID: CVE-2026-26170

Key Details

CVE	CVE-2026-26170
CVSS	CVSS 7.8 (High).
Affected products	see table below
Classified as	CWE-20 (Improper Input Validation)

What to Know

Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-26170
Vendor advisory	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26170