CVE-2026-42902 Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally

Description

Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Microsoft PowerToys 0.1	0.1 → < 0.99.1	0.99.1

Autres CVE de Microsoft PowerToys

Les 3 CVE de Microsoft PowerToys →

CVE-2026-96188 External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate… 7.3 Élevée CVE-2026-83681 Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally 5.5 Moyenne