Vulnerability intelligence

CVE-2026-54121

Microsoft Windows 10 Version 1607 CWE-285

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

CVSS Score

8.8

High

EPSS — Exploit Probability

1.8%

Riskier than 77% of all CVEs · checked 2026-09-12

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

2 articles across 2 outlets · first covered Jul 28, 2026 · latest Jul 29, 2026

Coverage timeline