CVE Watch10 de nov. de 2026

CVE-2026-88224

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate p

CVSS

7.0

Alta

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-59

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Referências oficiais

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88224

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-959637.8 ALT

—

——0Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.3h CVE-2026-1242247.0 ALT

—

——0Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally.3h CVE-2026-1221827.0 ALT

—

——0Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.3h CVE-2026-1221777.5 ALT

—

——0Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network.3h CVE-2026-1221747.0 ALT

—

——0Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.3h CVE-2026-1199137.0 ALT

—

——0Improper link resolution before file access ('link following') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.3h