CVE-2026-70177

Published: Oct 13, 2026Modified: Oct 16, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Related CWEs

Numeric Truncation Error

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70177

Source: secure@microsoft.com

Timeline

No history available yet.