CVE-2026-42902 Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally

Description

Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft PowerToys 0.1	0.1 → < 0.99.1	0.99.1

Other CVEs of Microsoft PowerToys

The 3 CVEs of Microsoft PowerToys →

CVE-2026-96188 External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate… 7.3 High CVE-2026-83681 Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally 5.5 Medium