PatchSiren cyber security CVE debrief
CVE-2026-33828 Microsoft CVE debrief
CVE-2026-33828 is a trust boundary violation vulnerability in Windows Attestation. An authorized attacker can exploit this vulnerability to elevate privileges locally. The vulnerability has a CVSS score of 7.8 and a severity of HIGH.
- Vendor
- Microsoft
- Product
- Windows 10 Version 1607
- CVSS
- HIGH 7.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-09
- Original CVE updated
- 2026-06-10
- Advisory published
- 2026-06-09
- Advisory updated
- 2026-06-10
Who should care
Administrators and users of Windows 10, Windows 11, and Windows Server systems should be aware of this vulnerability and take necessary actions to mitigate it.
Technical summary
The vulnerability is caused by a trust boundary violation in Windows Attestation. This allows an authorized attacker to elevate privileges locally. The Common Vulnerability Scoring System (CVSS) score for this vulnerability is 7.8, indicating a HIGH severity.
Defensive priority
HIGH
Recommended defensive actions
- Apply patches and updates from Microsoft as soon as possible.
- Review and update access controls and privilege settings to minimize the attack surface.
- Monitor system logs and network activity for suspicious behavior.
Evidence notes
The CVE-2026-33828 vulnerability was published on June 9, 2026, and modified on June 10, 2026. The vulnerability affects multiple versions of Windows 10, Windows 11, and Windows Server.
Official resources
-
CVE-2026-33828 CVE record
CVE.org
-
CVE-2026-33828 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
CVE-2026-33828 was published on [cvePublishedAt] and modified on [cveModifiedAt].