Improper Verification of Cryptographic Signature in Microsoft Windows and Windows Server - CVE-2026-62757

Vulnerability details

The vulnerability allows a remote attacker to bypass a security feature.

The vulnerability exists due to improper verification of cryptographic signature in Windows Schannel when handling certificate validation during the account enrollment process. A remote attacker can send crafted network traffic to bypass a security feature.

User interaction is required, and successful exploitation can bypass certificate validation during account enrollment. Specific protocol settings or configurations must be in place for exploitation to succeed.

Affected software

How to mitigate CVE-2026-62757

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-62757
• https://support.microsoft.com/help/5120238

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Windows