CVE-2026-49170

نوع الضعف

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

المنتجات المتأثرة

• microsoft windows_10_1809
• microsoft windows_10_21h2
• microsoft windows_10_22h2
• microsoft windows_11_24h2
• microsoft windows_11_25h2
• microsoft windows_11_26h1
• microsoft windows_server_2019
• microsoft windows_server_2022

المراجع

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49170