HIGHCVSS 7.8Actively exploited · CISA KEV since 2026-09-08Vulnerability

CVE-2026-81963

Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.

Properties

Euvd product
Windows 11 Version 24H2, Windows 11 Version 23H2, Windows Server 2025, Windows 11 version 26H1, Windows Server 2025 (Server Core installation), Windows 11 Version 25H2
Vulnerability name
Microsoft Windows Link Following Vulnerability
First seen
2026-10-14T23:14:33+00:00
Cvss score
7.8
Epss score
0.00393
Last seen
2026-10-19T12:00:27+00:00
Due date
2026-09-22
Euvd assigner
microsoft
Retrieved at
2026-10-23T22:33:19+00:00
Exploited euvd since
2026-09-08T00:00:00+00:00
Src batch id
epss_history-20261020T103617Z-728ddd
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2026-09-08
Score
7.8
Euvd base score version
3.1
Fetched at
2026-10-20T10:36:20+00:00
Euvd vendor
Microsoft
Cvss vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In Signal since
initial import (Sep 2026)
Euvd base score
7.8

Related Entities (13)

AFFECTS_PRODUCT (9)

→[Product]microsoft windows 11 26h1
→[Product]microsoft windows 11 25h2
→[Product]microsoft windows 11 24h2
→[Product]microsoft windows server 2025
→[Product]microsoft windows 11 23h2
→[Product]microsoft windows 11 24h2
→[Product]microsoft windows 11 25h2
→[Product]microsoft windows 11 26h1
→[Product]microsoft windows 11 23h2

HAS_WEAKNESS (2)

→[Weakness]Improper Access Control
→[Weakness]Improper Link Resolution Before File Access ('Link Following')

DESCRIBES (1)

←[KEVEntry]Microsoft Windows Link Following Vulnerability

INVOLVES (1)

←[Signal]kev_added · 2026-09-08

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-81963 (CVSS 7.8) — Ninja Signal Threat Intelligence | Ninja Signal