CVE-2026-81963KEVEXPLOITEDPATCHED

microsoft · windows 11 version 23h2

Windows Update Stack Elevation of Privilege Vulnerability

Description

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

Affected Products

Vendor	Product	Versions
microsoft	windows 11 version 23h2	10.0.22631.0, 10.0.22631.0, 10.0.26100.0, 10.0.26200.0, 10.0.28000.0, 10.0.26100.0, 10.0.26100.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963(vendor-advisory, patch)

Related News (6 articles)

Tier C

Cisco Talos17m ago

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

→ No new info (linked only)

Tier C

Krebs on Security49m ago

Microsoft Plugs Nearly 1,000 Security Holes

→ No new info (linked only)

Tier D

Dark Reading1h ago

Patch Tuesday Sets Another Record With 974 CVEs

→ No new info (linked only)

Tier C

Qualys Blog3h ago

Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review

→ No new info (linked only)

Tier B

CCCS Canada3h ago

Microsoft security advisory – September 2026 monthly rollup (AV26-896) – Update 1

→ No new info (linked only)

Tier A

Microsoft MSRC8h ago

CVE-2026-81963 Windows Update Stack Elevation of Privilege Vulnerability

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.8 HIGH

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

CISA KEV✅ Yes

Actively exploited✅ Yes

Patch available

10.0.22631.758210.0.26100.944510.0.26200.944510.0.28000.295410.0.26100.33438

CWECWE-59, CWE-284

PublishedSep 8, 2026

Last enriched4h ago

Trending Score143🔥

Source articles6

Independent6

Info Completeness3/14

Missing: vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-85880EXPKEV

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Trending: 147

HIGHCVE-2026-63520EXPKEV

Microsoft SharePoint Server Remote Code Execution Vulnerability

Trending: 73

CRITICALCVE-2026-70352

Azure AI Language Elevation of Privilege Vulnerability

Trending: 68

CRITICALCVE-2026-62916

Microsoft Entra ID Elevation of Privilege Vulnerability

Trending: 64

CRITICALCVE-2026-83711

Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

Trending: 64

Pin to Dashboard

Verification

State: verified

Confidence: 0%

Vulnerability Timeline

CVE Published

Sep 8, 2026

Added to CISA KEV

Sep 8, 2026

Discovered by ZDM

Sep 8, 2026

Actively Exploited

Sep 8, 2026

Patch Available

Sep 8, 2026