Security Advisory

CVE-2026-42902

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-09 17:04:30
Last updated 2026-07-28 22:18:28
Assigner microsoft
CVSS score 7.8
State PUBLISHED

Description

Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.