Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.

High CVSS 7.8

CVECVE-2026-42976

First seen2026-08-12 07:16 UTC

Disclosed2026-08-11 17:17 UTC

Last updated2026-08-12 07:16 UTC

Channel statusauto

Summary

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).