Skip to content

CVE record · 1 source

CVE-2026-108135

CVSS 7.0

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Vendor: Microsoft
Product: windows
CVSS: 7.0
EPSS: 0.003 (p22)
Exposure class: Operating system

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

21

CVE NVD 18d ago

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-108135 Microsoft