CVE-2026-83681: Microsoft PowerToys Tampering Vulnerability
Published Oct 13, 2026
·Updated
Microsoft PowerToys Tampering Vulnerability
Other sources
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft PowerToys
Microsoft PowerToys<0.101.2632.0
0.101.2632.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 0.101.2632.0
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·06:59 PM
Data Sourced
via MITRE·06:59 PM
DescriptionSeverity
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must already be authorized on the affected system and have local access. The available data does not indicate that remote exploitation is possible.
2
Does exploitation require a user to take any action?
No user interaction is required according to the supplied CVSS vector.
3
What is the expected security impact?
The reported impact is limited to integrity: an attacker may perform tampering. No confidentiality or availability impact is indicated.