Vulnerability intelligence

CVE-2026-45586

Microsoft Windows 10 Version 1607 CWE-59

Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally.

CVSS Score

7.8

High

EPSS — Exploit Probability

3.6%

Riskier than 89% of all CVEs · checked 2026-09-08

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

5 articles across 5 outlets · first covered Jun 9, 2026 · latest Jun 10, 2026

Coverage timeline

Microsoft patches record 206 flaws, fixing three zero‑day bugs
www.malwarebytes.com · Jun 10, 2026
Microsoft patches 200 flaws, zero day BitLocker bypass urgent
www.infosecurity-magazine.com · Jun 10, 2026
Microsoft Patch Tuesday fixes 206+ flaws amid zero day exploits
securityonline.info · Jun 10, 2026
Microsoft patches CVE-2026-45586 zero day after researcher clash
arstechnica.com · Jun 9, 2026
Microsoft fixes 200 bugs in June, none exploited, dozens critical
www.securityweek.com · Jun 9, 2026

Related CVEs — Microsoft

CVE-2026-69414 CVE-2026-85880KEV CVE-2026-81963KEV CVE-2026-55007 CVE-2026-69380 CVE-2026-69730 CVE-2026-69525 CVE-2026-69829