Skip to content
Sign in
CVE-2026-628327.8HighCWE-59

CVE-2026-62832: Microsoft Windows 10 Version 21H2 vulnerability

Microsoft · Windows 10 Version 21H2

Vendor fix available · Affected: Microsoft Windows 10 Version 21H2 · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.09 (9 Nov)

  1. In CISA KEV: not seen
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public: not seen
  5. Not establishedNothing in the sources we check
0.4%probability of exploitation in the next 30 days
31st percentile
050100

Higher than 31% of scored CVEs

7.8HighCVSS 3.1
LowHigh

DescriptionNVD

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

Coverage6 articles · 6 outlets

One row per outlet, in order of first report. First in our coverage: SecurityWeek, 11 Aug.

Full timeline
Quiet for 13 weekslast report 12 Aug6 articles6 outlets
11 Aug · SecurityWeek first28 Sep14 OctNow
  • Tue 11 Aug, 18:58 UTC. SecurityWeek, first report. Microsoft Patch Tuesday Fixes Zero Day Winsock Flaw CVE-2026-68820.
  • Tue 11 Aug, 20:11 UTC. SANS ISC, its first report on the story. Microsoft Patch Tuesday August 2026, (Tue, Aug 11th).
  • Wed 12 Aug, 00:47 UTC. Rapid7, its first report on the story. Microsoft Fixes 421 Flaws Including SharePoint Zero Day.
  • Wed 12 Aug, 03:40 UTC. SecurityOnline, its first report on the story. Microsoft Patch Tuesday Patches Critical WinSock Exploit.
  • Wed 12 Aug, 09:11 UTC. Infosecurity, its first report on the story. Microsoft Fixes 400 Flaws on August Patch Tuesday.
  • Wed 12 Aug, 14:11 UTC. Malwarebytes, its first report on the story. MS Patch Tuesday patches 421 flaws, Lazarus zero day exploited.
All coveragerunning total6SecurityWeek1SANS ISC1Rapid71SecurityOnl…1Infosecurity1Malwarebytes112 Aug12 Sep13 OctNow
  • First report
  • Article
  • Running total
Show as table
6 articles about CVE-2026-62832 from 6 outlets
Published (UTC)OutletHeadline
11 Aug 18:58SecurityWeekMicrosoft Patch Tuesday Fixes Zero Day Winsock Flaw CVE-2026-68820
11 Aug 20:11SANS ISCMicrosoft Patch Tuesday August 2026, (Tue, Aug 11th)
12 Aug 00:47Rapid7Microsoft Fixes 421 Flaws Including SharePoint Zero Day
12 Aug 03:40SecurityOnlineMicrosoft Patch Tuesday Patches Critical WinSock Exploit
12 Aug 09:11InfosecurityMicrosoft Fixes 400 Flaws on August Patch Tuesday
12 Aug 14:11MalwarebytesMS Patch Tuesday patches 421 flaws, Lazarus zero day exploited
  1. MS Patch Tuesday patches 421 flaws, Lazarus zero day exploited
    Malwarebytes · mentions it in passing
  2. Microsoft Fixes 400 Flaws on August Patch Tuesday
    Infosecurity · mentions it in passing
  3. Microsoft Patch Tuesday Patches Critical WinSock Exploit
    SecurityOnline · mentions it in passing
  4. Microsoft Fixes 421 Flaws Including SharePoint Zero Day
    Rapid7 · mentions it in passing
  5. Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)
    SANS ISC · mentions it in passing
  6. Microsoft Patch Tuesday Fixes Zero Day Winsock Flaw CVE-2026-68820
    SecurityWeek · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in