CVE-2026-81963 Advisory
Severity: HIGH (CVSS 7.8)
Status: Actively Exploited (KEV Catalog)
Affected Product:
- Microsoft Defender Business
Vulnerability: Improper link resolution before file access (link following) in Windows Update Stack allows an authorized attacker to elevate privileges locally.
Remediation:
- Apply security updates from Microsoft MSRC
- Refer to official guidance: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963
References:
- MSRC: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963
- CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-81963
Prioritize patching due to active exploitation.