PT-2026-58514 · Microsoft · Windows 10 Version 1607+7

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-54121

NVD

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2026-54121

Affected Products

Windows 10 Version 1607

Windows 10 Version 1809

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

Windows Server 2022

Windows Server 2025

References · 2

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54121 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-54121 · Security Note