CVE-2026-83793
7.0HighPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-59
Impact
Local authenticated attackers can escalate privileges to SYSTEM via the Windows Update Orchestrator Service. They require local code execution with basic user privileges to exploit it.
Root cause
The Windows Update Orchestrator Service improperly resolves symbolic links or junctions prior to file access, permitting arbitrary file manipulation.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Apply the corresponding Microsoft security update from the vendor advisory. No interim workarounds or mitigations have been documented.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.