{"id":"CVE-2026-69945","published":"2026-10-13T19:19:04.593","lastModified":"2026-10-16T19:02:47.843","description":"Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-862"],"vendors":["microsoft"],"products":["windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2022","windows server 2025"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69945","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A missing authorization check in Windows AppX Deployment Extensions allows local attackers who are already authenticated to escalate their privileges locally. This vulnerability affects multiple Windows versions and can lead to full system compromise.","exploitability":"Exploitation requires a local authenticated user with existing access to the system, making it moderately difficult to achieve initial access but relatively straightforward once the attacker is already inside.","blast_radius":"The vulnerability could impact all Windows 10 21H2, 22H2 and Windows 11 23H2, 24H2, 25H2, 26H1, 26H2 systems where an attacker can establish a local presence, potentially affecting thousands of endpoints in enterprise environments.","remediation":"Apply the Microsoft security update KB5040000 or later to all affected Windows versions including Windows 10 21H2, Windows 10 22H2, Windows 11 23H2, Windows 11 24H2, Windows 11 25H2, Windows 11 26H1, and Windows 11 26H2.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","local-exploitation","windows"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:54:41.052Z"}}