CVE-2026-49170

The vulnerability in the Windows StateRepository API allows an authorized attacker to exploit insufficient access control, enabling local privilege escalation. This can lead to unauthorized access to sensitive system resources and potentially compromise the integrity of the system. Organizations using affected Windows products should prioritize patching this vulnerability to mitigate the risk of exploitation.