CVE-2026-105009

LOWCVSS 7.5 · HIGH

Immediate actions

Recommended action window: Monitor and triage in normal cycle

NVD description

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

0.0/ 10 priority

Other references

Weakness type (CWE)

CWE-276

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Full discourse1 post

VulniPulse@vulnipulse1d
CVE advisory: CVE-2026-105009 - microsoft: Windows Server Update Service Elevation of Privilege Vulnerability. https://vulnipulse.com/advisories/microsoft-cve-2026-105009 #CVE #CyberSecurity #Microsoft #WindowsServer
1000026
30 followersView on X