CVE-2026-69585

Windows Search is part of Windows that helps find files and content. This vulnerability is like a mistake in how Windows handles internal data types; if someone already has an account on your machine, that mistake could let them get much higher permissions than they should.

This matters if you use Microsoft Windows Search on any of these systems: Windows 10, Windows 11, or the listed Windows Server editions (2012/2012 R2/2016/2019/2022/2025). The risk is mainly for scenarios where an attacker already has an authorized foothold on the machine (for example, a user account on the system). Because this is a local elevation-of-privilege problem, it’s only a meaningful risk when the attacker can reach and interact with the local system under an account.

This is a RED issue because it’s an elevation-of-privilege vulnerability in a core Windows component: if someone already has local access, they can potentially gain much higher control. Even though there’s no public exploit code on record and it’s not listed in CISA KEV, you should still patch quickly to close the privilege-escalation path.