Skip to content

Known vulnerabilities in Microsoft PowerToys

Is your version affected?

CVE Summary Score Published
CVE-2026-96188 External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate… 7.3 High Oct 13, 2026
CVE-2026-83681 Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally 5.5 Medium Oct 13, 2026
CVE-2026-42902 Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally 7.8 High Jun 9, 2026

Other Microsoft products