PT-2026-58163 · Microsoft · Windows 10 Version 1607+12

Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-49791

NVD

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2026-49791

Produtos afetados

Windows 10 Version 1607

Windows 10 Version 1809

Windows 10 Version 21H2

Windows 10 Version 22H2

Windows 11 Version 24H2

Windows 11 Version 25H2

Windows 11 Version 26H1

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

Windows Server 2022

Windows Server 2025

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-49791 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49791 · Aviso do Fabricante