CVE-2026-66804

Vendor

Microsoft

Product

Windows

CVSS

7.8

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 33
   ZDI advisory ZDI 8 Sep 2026

   Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

   This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit…

   CVSS 7.8 CVE-2026-66804 Microsoft
2. 21
   Research Project Zero 21 Sep 2026

   Windows Exploitation Techniques: Dangling COM Object Registrations

   This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in Windows, CVE-2026-66804, that I and 14 others reported. This issue is an incomplete fix for CVE-2026-50343, a bug dubbed “Dark…

   Fix available CVE-2026-66804CVE-2026-50343 Microsoft
3. 19
   Advisory MSRC 13 Aug 2026

   CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

   Updated an acknowledgement. This is an informational change only.

   CVE-2026-66804 Microsoft