CVE-2026-62698

This flaw is in how Windows handles “Digest Authentication,” which is a way systems authenticate requests. If someone already has a foothold on the machine, the bug can help them turn that foothold into higher privileges (like administrator-level control). It’s like having a key to one room and using a door-label mistake to get into rooms with much more power.

This matters if you run or administer Microsoft Windows 10, Windows 11, or Windows Server 2012/2012 R2/2016/2019/2022/2025. The findings describe this as requiring an authorized attacker (local foothold), so the risk is highest where systems can be accessed by users, services, or intruders who may gain local access.
Only a risk if an attacker can reach the machine with authorized/local access; it is not described as a purely remote, unauthenticated internet attack here.

This is RED because it’s a privilege-escalation flaw on widely used Windows products and there is actor-linked pressure noted (Lazarus group) alongside a patch availability announcement. Even though there is no public exploit code on record and it’s not in CISA’s KEV list, the confirmed focus on patching and the local elevation mechanism mean you should act immediately for affected systems.
Patch it now across all vulnerable Windows versions in your environment that aren’t already at the fixed builds.