CVE-2026-81963
Highlighted 7.8 · High
Local privilege escalation in the Windows Update Stack through link following
How our CVE-2020-0728 variant hunt led from a false CBS lead to a reproducible TrustedInstaller write and SYSTEM elevation.
Vulnerability class
Link following
A privileged process follows a symbolic link, junction or mount point planted by the attacker.
1 write-up, 1 vulnerability
Vulnerabilities
| Identifier | Product | Vulnerability | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-81963 | Microsoft Windows | Link following in the Windows Update Stack | 7.8 High |