Is CVE-2026-81963 being exploited?

No public exploit is currently tracked. It is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

How severe is CVE-2026-81963?

CVE-2026-81963 has a CVSS v3 severity of HIGH (7.8).

CVE-2026-81963 affects windows_11_25h2, windows_11_24h2, windows_11_26h1, windows_11_23h2, windows_server_2025.

Back

Description

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.