AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-66804

HIGH · CVSS 7.8 EPSS 3.42%

Source: NVD + CISA KEV + EPSS · Published 2026-08-11 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

A vulnerability in Windows Cross Device Service enables an authorized attacker to exploit improper access control, leading to local privilege escalation. This could allow the attacker to gain elevated permissions, potentially compromising system integrity and security. Organizations using affected Windows products should prioritize patching this vulnerability to mitigate the risk of unauthorized access and control.

CVE
CVE-2026-66804
Severity
HIGH
CVSS
7.8
EPSS
3.42%
Windows

Original NVD Description

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)