CVE-2026-83499

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-81969

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-105009

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-105009

A local privilege escalation vulnerability exists in the Windows Server Update Service due to incorrect default permissions (CWE-276). An authorized attacker can exploit this flaw to elevate privileges locally. While the CVSS 3.1 score reflects a High severity (7.5), the attack requires low privi...

CVE-2026-83499

The Windows Server Update Service is impacted by an insufficient granularity of access control vulnerability (CWE-1220). This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is not further detailed in the provided documents, the vulnerabil...

CVE-2026-81969

The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...

Windows Server Update Service Elevation of Privilege Vulnerability

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

PT-2026-111976

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Incorrect default permissions in the service allow an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the...

PT-2026-112404

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...

Microsoft Windows: CVE-2026-81969: Windows Server Update Service Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-81969: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83499: Windows Server Update Service Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83499: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-105009: Incorrect Default Permissions

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

Windows Server Update Service Network Change

The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...

CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

...

CVE-2026-50328 Windows Server Update Service (WSUS) Tampering Vulnerability

...

Windows Server Update Service (WSUS) Tampering Vulnerability

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

CVE-2026-50328: Uncaught Exception

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

CVE-2026-50444: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...