Jun 2026: Microsoft PowerToys Elevation of Privilege Vulnerability
CVE-2026-42902 Published on June 9, 2026
Microsoft PowerToys Elevation of Privilege Vulnerability
Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-42902 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-42902
Want to know whenever a new CVE is published for Microsoft Power Toys? stack.watch will email you.
Affected Versions
Microsoft PowerToys:- Version 0.1 and below v0.99.1 is affected.