Sign in

4.7 Medium

CVE-2026-21517 Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to…

Description

Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally.

Affected products and versions

Product	Affected versions	Fixed in
Windows App for Mac 11.0	11.0.0 → < 11.3.2	11.3.2

The 2 CVEs of Windows App for Mac →

CVE-2026-69550 Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network 6.5 Medium

Do you use Windows App for Mac?

Track this CVE Watch Windows App for Mac Check my SBOMs

www.cveye.io/en/cve/CVE-2026-21517

Timeline

Published February 10, 2026
Last modified August 19, 2026

References

Windows App for Mac Installer Elevation of Privilege Vulnerability msrc.microsoft.com

Track this CVE