CVE-2026-73019

Published: Sep 8, 2026Modified: Sep 8, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: secure@microsoft.com

Description

Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.

Related CWEs

Improper Resolution of Path Equivalence

The product is vulnerable to file system contents disclosure through path equivalence. Path equivalence involves the use of special characters in file and directory names. The associated manipulations are intended to generate multiple names for the same object.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-73019

Source: secure@microsoft.com

Timeline

No history available yet.