CVE-2026-96858 | Microsoft Windows up to Server 2025 Security Account Manager improper authorization

October 14, 2026 Yanac

A vulnerability identified as problematic has been detected in Microsoft Windows up to Server 2025. Affected by this vulnerability is an unknown functionality of the component Security Account Manager. This manipulation causes improper authorization.

This vulnerability is tracked as CVE-2026-96858. The attack is restricted to local execution. No exploit exists.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More