MICROSOFT has addressed a significant security vulnerability, CVE-2026-66804, related to the Windows Cross Device Service, which allows ordinary users to elevate their privileges to SYSTEM status through a DLL planting exploit. The vulnerability has a CVSS score of 7.8 and affects various builds of Windows 10 (22H2). Microsoft has issued patches in the August 2026 update, and users are urged to apply these updates promptly, especially as there are currently no confirmed exploits in the wild. Security measures include limiting local access on shared machines and monitoring for unauthorized DLLs.
Cross Device Service flaw lets users escalate to SYSTEM via DLL
CyberSIXT Evidence Panel
Article by CyberSIXT