CVE-2026-70184

CVE-2026-70184 · Windows Backup Engine Elevation of Privilege Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

CVSS 7.8 · High · EPSS 0.4% · Fix available

Affected products and versions

windows 10 version 21h2
Versions
- ≥ 10.0.19044.0, < 10.0.19044.7807: Affected (custom)
Update to 10.0.19044.7807
windows 10 version 22h2
Versions
- ≥ 10.0.19045.0, < 10.0.19045.7807: Affected (custom)
Update to 10.0.19045.7807
windows 11 version 23h2
Versions
- ≥ 10.0.22631.0, < 10.0.22631.7652: Affected (custom)
Update to 10.0.22631.7652
windows 11 version 24h2
Versions
- ≥ 10.0.26100.0, < 10.0.26100.9711: Affected (custom)
Update to 10.0.26100.9711
windows 11 version 25h2
Versions
- ≥ 10.0.26200.0, < 10.0.26200.9711: Affected (custom)
Update to 10.0.26200.9711
windows 11 version 26h1
Versions
- ≥ 10.0.28000.0, < 10.0.28000.3231: Affected (custom)
Update to 10.0.28000.3231
windows 11 version 26h2
Versions
- ≥ 10.0.26300.0, < 10.0.26300.9711: Affected (custom)
Update to 10.0.26300.9711