Orta CVSS 5.5
CVE-2026-70235: Windows 11 24h2: eksik yetkilendirme
Açıklama (NVD)
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
Özet bilgiler
- Ürün
- Microsoft Windows 11 24h2
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - EPSS
- %0,32 (yüzdelik 25)
- CWE
- CWE-862
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| microsoft-windows-11-24h2 | — | — | 10.0.26100.9711 |
| microsoft-windows-11-24h2 | — | — | 10.0.26100.9711 |
| microsoft-windows-11-25h2 | — | — | 10.0.26200.9711 |
| microsoft-windows-11-25h2 | — | — | 10.0.26200.9711 |
| microsoft-windows-11-26h1 | — | — | 10.0.28000.3231 |
| microsoft-windows-11-26h1 | — | — | 10.0.28000.3231 |
| microsoft-windows-11-26h2 | — | — | 10.0.26300.9711 |
| microsoft-windows-11-26h2 | — | — | 10.0.26300.9711 |
| microsoft-windows-server-2025 | — | — | 10.0.26100.33650 |