PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-49161 Microsoft CVE debrief

CVE-2026-49161 is a high-severity vulnerability in Microsoft PC Manager, with a CVSS score of 7.8. The vulnerability is caused by improper access control, allowing an authorized attacker to bypass a security feature locally. The vulnerability was published on [cve-org](https://www.cve.org/CVERecord?id=CVE-2026-49161) and details can be found on [nvd](https://nvd.nist.gov/vuln/detail/CVE-2026-49161).

Vendor
Microsoft
Product
Microsoft PC Manager
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-09
Original CVE updated
2026-06-12
Advisory published
2026-06-09
Advisory updated
2026-06-12

Who should care

Users of Microsoft PC Manager, particularly those with local access to the system, should be aware of this vulnerability and take necessary precautions.

Technical summary

The vulnerability is caused by improper access control in Microsoft PC Manager, allowing an authorized attacker to bypass a security feature locally. The CVSS vector for this vulnerability is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Defensive priority

High

Recommended defensive actions

  • Apply the patch or update from Microsoft as soon as possible.
  • Review and follow Microsoft's mitigation guidance [ref-4](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49161).

Evidence notes

The vulnerability was published on June 9, 2026, and modified on June 12, 2026. The CVE record can be found on [cve-org](https://www.cve.org/CVERecord?id=CVE-2026-49161) and details can be found on [nvd](https://nvd.nist.gov/vuln/detail/CVE-2026-49161).

Sources and references

Verified primary and authoritative sources

  • CVE-2026-49161 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-49161

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-49161 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-49161

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.