CVE-2026-45586

Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally.

Affected products

Windows, Windows Collaborative Translation Framework

Microsoft Windows 10 1607

< 10.0.14393.9234

Microsoft Windows 10 1809

< 10.0.17763.8880

Microsoft Windows 10 21h2

< 10.0.19044.7417

Microsoft Windows 10 22h2

< 10.0.19045.7417

Microsoft Windows 11 23h2

< 10.0.22631.7219

Microsoft Windows 11 24h2

< 10.0.26100.8655

CVSS 3.1

7.8 HIGH

EPSS

3.6% (88th percentile)

Weakness

CWE-59

NVD status

Analyzed

Published

2026-06-09