Weakness
Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally.
Affected products
- microsoft windows_10_21h2
- microsoft windows_10_22h2
- microsoft windows_11_23h2
- microsoft windows_11_24h2
- microsoft windows_11_25h2
- microsoft windows_11_26h1
- microsoft windows_server_2022
- microsoft windows_server_2022_23h2
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32181
- https://www.vicarius.io/vsociety/posts/cve-2026-32181-detection-script-dos-vulnerability-in-windows-connected-user-experiences-and-telemetry-service
- https://www.vicarius.io/vsociety/posts/cve-2026-32181-mitigation-script-dos-vulnerability-in-windows-connected-user-experiences-and-telemetry-service
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.