CVE-2026-49805

Imagine your computer has a “front door” for regular users, and this bug acts like a hidden shortcut to climb past that front door into higher-power areas of the system. If someone already has some access on the same computer, they may be able to take control and do much more than a normal user could.

This matters if you use or manage any of the affected Windows versions: Windows 10, Windows 11, and the listed Windows Server editions. It’s a local issue: an attacker needs low privileges and access on the same machine, and no user action is required once they are on the system. This is mainly a risk when a malicious person can already get local access (for example, a compromised account or physical/local access), because default reachability from the internet is not known.

This is RED because it is a local privilege-escalation flaw that can turn a low-privileged foothold into full administrator or kernel-level control on the same machine. Even though no clear, dated public exploitation claims were found in the provided materials, the impact of a successful local escalation is severe, and patches are available for multiple supported branches.