Orta CVSS 5.5
CVE-2026-96858: Windows 10 21h2: kritik işlevde kimlik doğrulaması eksik
Açıklama (NVD)
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
Özet bilgiler
- Ürün
- Microsoft Windows 10 21h2
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N - EPSS
- %0,46 (yüzdelik 40)
- CWE
- CWE-306
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| microsoft-windows-10-21h2 | — | — | 10.0.19044.7807 |
| microsoft-windows-10-21h2 | — | — | 10.0.19044.7807 |
| microsoft-windows-10-21h2 | — | — | 10.0.19044.7807 |
| microsoft-windows-10-22h2 | — | — | 10.0.19045.7807 |
| microsoft-windows-10-22h2 | — | — | 10.0.19045.7807 |
| microsoft-windows-10-22h2 | — | — | 10.0.19045.7807 |
| microsoft-windows-11-23h2 | — | — | 10.0.22631.7652 |
| microsoft-windows-11-23h2 | — | — | 10.0.22631.7652 |
| microsoft-windows-11-24h2 | — | — | 10.0.26100.9711 |
| microsoft-windows-11-24h2 | — | — | 10.0.26100.9711 |
| microsoft-windows-11-25h2 | — | — | 10.0.26200.9711 |
| microsoft-windows-11-25h2 | — | — | 10.0.26200.9711 |
| microsoft-windows-11-26h1 | — | — | 10.0.28000.3231 |
| microsoft-windows-11-26h1 | — | — | 10.0.28000.3231 |
| microsoft-windows-11-26h2 | — | — | 10.0.26300.9711 |
| microsoft-windows-11-26h2 | — | — | 10.0.26300.9711 |
| microsoft-windows-server-2022 | — | — | 10.0.20348.5761 |
| microsoft-windows-server-2025 | — | — | 10.0.26100.33650 |