CVE-2026-49176

Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.

Affected products

Walletservice, Windows

Microsoft Windows 10 1607

< 10.0.14393.9339

Microsoft Windows 10 1809

< 10.0.17763.9020

Microsoft Windows 10 21h2

< 10.0.19044.7548

Microsoft Windows 10 22h2

< 10.0.19045.7548

Microsoft Windows 11 24h2

< 10.0.26100.8875

Microsoft Windows 11 25h2

< 10.0.26200.8875

Fix

Available

CVSS 3.1

7.8 HIGH

EPSS

0.5% (39th percentile)

Weakness

CWE-59, CWE-269

NVD status

Analyzed

Published

2026-07-14