Aug 2026: Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
CVE-2026-62721 Published on August 11, 2026

Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.

Vendor Advisory NVD

Weakness Type

Insufficient Granularity of Access Control

The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.


Products Associated with CVE-2026-62721

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

 
 
 
 
 
 
 
 
 
 
 

Affected Versions

Microsoft Windows 10 Version 1607: Microsoft Windows 10 Version 1809: Microsoft Windows 10 Version 21H2: Microsoft Windows 10 Version 22H2: Microsoft Windows 11 version 23H2: Microsoft Windows 11 Version 23H2: Microsoft Windows 11 Version 24H2: Microsoft Windows 11 Version 25H2: Microsoft Windows 11 version 26H1: Microsoft Windows Server 2012: Microsoft Windows Server 2012 (Server Core installation): Microsoft Windows Server 2012 R2: Microsoft Windows Server 2012 R2 (Server Core installation): Microsoft Windows Server 2016: Microsoft Windows Server 2016 (Server Core installation): Microsoft Windows Server 2019: Microsoft Windows Server 2019 (Server Core installation): Microsoft Windows Server 2022: Microsoft Windows Server 2025: Microsoft Windows Server 2025 (Server Core installation):