Main
Vulnerability Database
Exploits
ID:13040 - Exploit for Improper access control in Microsoft Windows - CVE-2026-66804
ID:13040 - Exploit for Improper access control in Microsoft Windows - CVE-2026-66804
Published: September 4, 2026
Vulnerability identifier: #VU141866
Vulnerability risk: Low
CVE-ID: CVE-2026-66804
CWE-ID: CWE-284
Exploitation vector: Local access
Vulnerable software:
Microsoft Windows
Microsoft Windows
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to elevate privileges.
The vulnerability exists due to improper access control in Windows Cross Device Service when handling local access to the service. A local user can exploit the access control weakness to elevate privileges.
Successful exploitation could result in SYSTEM privileges.
Remediation
Install security update from vendor's website.