CVE-2026-70348

Published: Ago 11, 2026 Last Modified: Ago 11, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 5,5

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: none

Integrity: none

Availability: high

AI Translation Available

Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.

Draft

Abstraction: Base Structure: Simple

Security Scopes Affected:

Confidentiality Integrity Access Control Other

Potential Impacts:

Read Files Or Directories Modify Files Or Directories Bypass Protection Mechanism Execute Unauthorized Code Or Commands

Operating Systems: Windows, Unix

Likelihood of Exploit: Medium

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70348