{"id":"CVE-2026-70580","published":"2026-10-13T19:19:51.270","lastModified":"2026-10-16T16:20:53.877","description":"Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70580","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Windows Credential Guard lacks proper authentication for critical functions, allowing authenticated attackers to perform local spoofing attacks. This weakness enables attackers who already have user-level access to escalate their privileges and impersonate legitimate system components.","exploitability":"Exploitation requires an attacker to already have user-level access to the target system, making it moderately difficult but not highly complex to achieve, with no additional preconditions beyond standard user authentication.","blast_radius":"The impact could be significant across enterprise environments where Credential Guard is enabled, potentially allowing attackers to bypass credential protection mechanisms and impersonate trusted services or users.","remediation":"Enable Windows Credential Guard with Virtualization-based Security (VBS) and ensure all systems are updated to Windows 10/11 version 22H2 or later with the latest cumulative updates.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["credential-guard","spoofing","local-privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:57:29.120Z"}}