CVE-2026-21517

7.0 highEPSS 0.4%

High (7.0) in microsoft windows app. EPSS 0.4% chance of exploitation in the next 30 days.

Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally.

Severity

7.0 high

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2026-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19