High severity7.8CISA KEVNVD Advisory· Published Sep 8, 2026· Updated Sep 9, 2026
CVE-2026-81963
CVE-2026-81963
Description
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*+ 1 more
- cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*range: <10.0.22631.7582
- cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*range: <10.0.22631.7582
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*+ 1 more
- cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*range: <10.0.26100.9445
- cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*range: <10.0.26100.9445
cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*+ 1 more
- cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*range: <10.0.26200.9445
- cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*range: <10.0.26200.9445
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*+ 1 more
- cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*range: <10.0.28000.2954
- cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*range: <10.0.28000.2954
- cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*Range: <10.0.26100.33438
Patches
Vulnerability mechanics
References
2- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81963nvdPatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
26- October 2026 Patch Tuesday forecast: Time for an Office cleanupHelp Net Security · Oct 9, 2026
- ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware ArrestsThe Hacker News · Oct 5, 2026
- ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsThe Hacker News · Sep 14, 2026
- 14th September – Threat Intelligence ReportCheck Point Research · Sep 14, 2026
- Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ StoriesCyber Security News · Sep 14, 2026
- Windows 11 Security Update KB5124008 Breaks Always-On VPN ConnectionsCyber Security News · Sep 11, 2026
- Remote Desktop Services Failures on Windows Servers Following September UpdateCyber Security News · Sep 11, 2026
- Breach Roundup: ShinyHunters Claims Florida DMV HackGovInfoSecurity · Sep 10, 2026
- Microsoft fixes record 964 flaws, including 2 exploited zero-daysMalwarebytes Labs · Sep 9, 2026
- Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026Infosecurity Magazine · Sep 9, 2026
- September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successorHelp Net Security · Sep 9, 2026
- Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-DaysThe Hacker News · Sep 9, 2026
- Microsoft breaks Patch Tuesday record with 974-CVE delugeThe Register Security · Sep 9, 2026
- Microsoft discloses two actively exploited zero-days among 974 vulnerabilitiesCyberScoop · Sep 8, 2026
- Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploitedThe Record · Sep 8, 2026
- Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilitiesCisco Talos Intelligence · Sep 8, 2026
- Microsoft Plugs Nearly 1,000 Security HolesKrebs on Security · Sep 8, 2026
- Patch Tuesday - September 2026Rapid7 Blog · Sep 8, 2026
- Patch Tuesday Sets Another Record With 974 CVEsDark Reading · Sep 8, 2026
- September 2026 Microsoft Patch Tuesday, (Tue, Sep 8th)SANS Internet Storm Center · Sep 8, 2026
- Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-DaysSecurityWeek · Sep 8, 2026
- Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)Tenable Blog · Sep 8, 2026
- Massive Microsoft Patch Tuesday September 2026 – 973 Vulnerabilities Fixed, Including 2 Zero-DaysCyber Security News · Sep 8, 2026
- Microsoft: 2 Actively-Exploited Flaws Added to CISA KEVVypr Intelligence · Sep 8, 2026
- CISA Adds Four Known Exploited Vulnerabilities to CatalogCISA Alerts
- September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEsCrowdStrike Blog