CVE-2026-62698: Microsoft Digest Authentication Elevation of Privilege Vulnerability
Microsoft Digest Authentication Elevation of Privilege Vulnerability
Other sources
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7663Patch KB5120249 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26279Patch KB5120385 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23337Patch KB5120386 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9115Patch KB5120238 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5499Fixed in 10.0.20348.5440Patch KB5120229 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9418Patch KB5120418 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2704Patch KB5121000 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26000.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7517Patch KB5120240 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.7663Patch KB5120249
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62698?
The severity of CVE-2026-62698 is rated as high, with a score of 7.8.
How do I fix CVE-2026-62698?
To address CVE-2026-62698, apply the necessary security updates provided by Microsoft for affected Windows versions.
What systems are affected by CVE-2026-62698?
CVE-2026-62698 affects multiple versions of Microsoft Windows, including Windows 10, 11, and various Windows Server editions.
What exploit risk does CVE-2026-62698 pose?
CVE-2026-62698 poses a risk of elevation of privilege for authorized attackers, potentially allowing them to gain higher system access.
When was CVE-2026-62698 published?
CVE-2026-62698 was published on August 11, 2026.