EXPOSURES › CVE-2026-81963
CVE-2026-81963
HIGH ⌖ ON CISA KEV · EXPLOITEDA local privilege escalation vulnerability in the Windows Update Stack allows attackers to escalate to SYSTEM.
This vulnerability enables local attackers to escalate privileges to SYSTEM, bypassing standard security controls. DIB organizations must ensure all Windows systems are patched immediately, as this flaw is actively exploited in the wild and represents a critical gap in endpoint security. Failure to patch exposes systems to unauthorized access and potential data exfiltration.
Shame score — A known vulnerability in a widely deployed OS was actively exploited in the wild, indicating a failure to patch known CVEs and a lack of timely remediation.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |