7.8
CVE-2026-62721
- EPSS 0.32%
- Veröffentlicht 11.08.2026 17:06:00
- Zuletzt bearbeitet 14.09.2026 18:18:08
- Erkennungen
Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 1607 HwPlatform x64 Version < 10.0.14393.9418
Microsoft ≫ Windows 10 1607 HwPlatform x86 Version < 10.0.14393.9418
Microsoft ≫ Windows 10 1809 HwPlatform x64 Version < 10.0.17763.9115
Microsoft ≫ Windows 10 1809 HwPlatform x86 Version < 10.0.17763.9115
Microsoft ≫ Windows 10 21h2 HwPlatform arm64 Version < 10.0.19044.7663
Microsoft ≫ Windows 10 21h2 HwPlatform x64 Version < 10.0.19044.7663
Microsoft ≫ Windows 10 21h2 HwPlatform x86 Version < 10.0.19044.7663
Microsoft ≫ Windows 10 22h2 HwPlatform arm64 Version < 10.0.19045.7663
Microsoft ≫ Windows 10 22h2 HwPlatform x64 Version < 10.0.19045.7663
Microsoft ≫ Windows 10 22h2 HwPlatform x86 Version < 10.0.19045.7663
Microsoft ≫ Windows 11 23h2 HwPlatform arm64 Version < 10.0.22631.7517
Microsoft ≫ Windows 11 23h2 HwPlatform x64 Version < 10.0.22631.7517
Microsoft ≫ Windows 11 24h2 HwPlatform arm64 Version < 10.0.26100.9106
Microsoft ≫ Windows 11 24h2 HwPlatform x64 Version < 10.0.26100.9106
Microsoft ≫ Windows 11 25h2 HwPlatform arm64 Version < 10.0.26200.9106
Microsoft ≫ Windows 11 25h2 HwPlatform x64 Version < 10.0.26200.9106
Microsoft ≫ Windows 11 26h1 HwPlatform arm64 Version < 10.0.28000.2704
Microsoft ≫ Windows 11 26h1 HwPlatform x64 Version < 10.0.28000.2704
Microsoft ≫ Windows Server 2012 Version -
Microsoft ≫ Windows Server 2012 Version r2
Microsoft ≫ Windows Server 2016 Version < 10.0.14393.9418
Microsoft ≫ Windows Server 2019 Version < 10.0.17763.9115
Microsoft ≫ Windows Server 2022 Version < 10.0.20348.5440
Microsoft ≫ Windows Server 2025 Version < 10.0.26100.33222
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.32% | 0.249 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Microsoft | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-1220 Insufficient Granularity of Access Control
The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62721