Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

High CVSS 7.0

CVECVE-2026-108135

First seen2026-10-16 05:15 UTC

Disclosed2026-10-13 19:18 UTC

Last updated2026-10-16 05:15 UTC

Channel statusauto

Summary

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).