CVE-2026-26170Patch(microsoft / windows_10_1607)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch microsoft windows_10_1607 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

microsoft CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26170

Weakness type (CWE)

CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 4 signals
Disclosure: 1 classified signal
Peaked 2d ago at 2 mentions (2026-04-14); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

microsoft

Products

windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2016windows_server_2019

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Patch

375.0%

Disclosure

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-14	2	Patch2
2026-04-15	1	Disclosure1
2026-04-25	1	Patch1

Full discourse4 posts

_Emin_@p0w3rsh3ll177d
Patch
CVE-2026-26143 Microsoft PowerShell Security Feature Bypass Vulnerability > https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26143 CVE-2026-26170 PowerShell Elevation of Privilege Vulnerability > https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26170 #PowerShell
Post summary
The tweet lists two Microsoft PowerShell CVEs and provides links to Microsoft’s update guides, indicating known vulnerabilities and the availability of vendor patches, without mention of PoC, active exploitation, or debunking.
0001093
1.2K followersView on X
Giuseppe Paternicola@giuseppe_1337167d
Patch
🚨 HIGH SEVERITY: CVE-2026-26170 (CVSS 7.8) Microsoft PowerShell privilege escalation via improper input validation. Local attack, low complexity. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #CyberSecurity https://t.co/K7krGlMfia
Post summary
The tweet announces CVE‑2026‑26170, highlighting a privilege‑escalation flaw in PowerShell and urges immediate patching, without any PoC, exploit, or active exploitation evidence.
0000054
25 followersView on X
CVE@CVEnew177d
Disclosure
CVE-2026-26170 Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. https://www.cve.org/CVERecord?id=CVE-2026-26170
Post summary
The tweet announces a new vulnerability, CVE-2026-26170, detailing improper input validation in PowerShell that allows privilege escalation, but provides no PoC, exploit code, or patch information.
00000139
57.2K followersView on X
WindowsForum@windowsforum177d
Patch
🪟 CVE-2026-26170 + MSRC confidence metric: Microsoft basically saying “trust us, we’re pretty sure” because root-cause fanfiction isn’t ready. Still, if PowerShell EoP is real, patch yesterday. https://windowsforum.com/threads/cve-2026-26170-and-the-msrc-confidence-metric-why-powershell-eop-matters.412966/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsSecurity #MsrcConfidenceMetric #Cve202626170 https://t.co/CdBFsg7V6O
Post summary
Microsoft patched CVE‑2026‑26170 after evaluating it via the MSRC confidence metric, with no PoC or active exploitation reported.
0000070
1.1K followersView on X

CPE platform detail23 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

23 of 23 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	microsoft	windows_10_1607	-	-	x64
OS	microsoft	windows_10_1607	-	-	x86
OS	microsoft	windows_10_1809	-	-	x64
OS	microsoft	windows_10_1809	-	-	x86
OS	microsoft	windows_10_21h2	-	-	arm64
OS	microsoft	windows_10_21h2	-	-	x64
OS	microsoft	windows_10_21h2	-	-	x86
OS	microsoft	windows_10_22h2	-	-	arm64
OS	microsoft	windows_10_22h2	-	-	x64
OS	microsoft	windows_10_22h2	-	-	x86
OS	microsoft	windows_11_23h2	-	-	arm64
OS	microsoft	windows_11_23h2	-	-	x64
OS	microsoft	windows_11_24h2	-	-	arm64
OS	microsoft	windows_11_24h2	-	-	x64
OS	microsoft	windows_11_25h2	-	-	arm64
OS	microsoft	windows_11_25h2	-	-	x64
OS	microsoft	windows_11_26h1	-	-	arm64
OS	microsoft	windows_11_26h1	-	-	x64
OS	microsoft	windows_server_2016	-	-	-
OS	microsoft	windows_server_2019	-	-	-
OS	microsoft	windows_server_2022	-	-	-
OS	microsoft	windows_server_2022_23h2	-	-	-
OS	microsoft	windows_server_2025	-	-	-

Explore more

Back to dashboard microsoft CVEs windows_10_1607 vulnerabilities

What researchers are saying

CVE-2026-26170

Giuseppe Paternicola[verified]@giuseppe_1337Patch

The tweet announces CVE‑2026‑26170, highlighting a privilege‑escalation flaw in PowerShell and urges immediate patching, without any PoC, exploit, or active exploitation evidence.

WindowsForum[verified]@windowsforumPatch

Microsoft patched CVE‑2026‑26170 after evaluating it via the MSRC confidence metric, with no PoC or active exploitation reported.

_Emin_@p0w3rsh3llPatch

The tweet lists two Microsoft PowerShell CVEs and provides links to Microsoft’s update guides, indicating known vulnerabilities and the availability of vendor patches, without mention of PoC, active exploitation, or debunking.

CVE@CVEnewDisclosure

The tweet announces a new vulnerability, CVE-2026-26170, detailing improper input validation in PowerShell that allows privilege escalation, but provides no PoC, exploit code, or patch information.