PatchSiren cyber security CVE debrief
CVE-2026-45586 Microsoft CVE debrief
CVE-2026-45586 is a HIGH severity vulnerability in Windows Collaborative Translation Framework. The vulnerability is caused by improper link resolution before file access, also known as 'link following'. An authorized attacker can exploit this vulnerability to elevate privileges locally. The vulnerability has a CVSS score of 7.8.
- Vendor
- Microsoft
- Product
- Windows 10 Version 1607
- CVSS
- HIGH 7.8
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-09
- Original CVE updated
- 2026-06-11
- Advisory published
- 2026-06-09
- Advisory updated
- 2026-06-11
Who should care
Administrators and users of Windows Collaborative Translation Framework should be aware of this vulnerability and take necessary actions to mitigate it.
Technical summary
The vulnerability is caused by improper link resolution before file access in Windows Collaborative Translation Framework. This allows an authorized attacker to elevate privileges locally.
Defensive priority
HIGH
Recommended defensive actions
- Apply patches or updates provided by Microsoft to fix the vulnerability.
- Refer to the vendor advisory for more information: resourceLinkAnnotations.ref-4
Evidence notes
The vulnerability is documented in the CVE record: resourceLinkAnnotations.cve-org and the NVD detail page: resourceLinkAnnotations.nvd
Official resources
-
CVE-2026-45586 CVE record
CVE.org
-
CVE-2026-45586 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
CVE-2026-45586 was published on 2026-06-09T17:17:26.570Z and modified on 2026-06-11T15:33:43.427Z.