PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-70184 Microsoft CVE debrief

The Windows Backup Engine Elevation of Privilege Vulnerability, tracked as CVE-2026-70184, is a high-severity vulnerability that allows an authorized attacker to elevate privileges locally due to improper resolution of path equivalence. This vulnerability affects Windows systems using the Windows Backup Engine. Defenders responsible for Windows systems should assess exposure and apply patches to prevent local privilege elevation. The CVE record was published on 2026-10-13T19:01:09.421Z and has not been modified since then. The NVD entry is currently 7.8 HIGH. AI-assisted PatchSiren debrief based on the supplied source corpus.

Vendor
Microsoft
Product
Windows 10 Version 21H2
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-13
Original CVE updated
2026-10-13
Advisory published
2026-10-13
Advisory updated
2026-10-13

Who should care

Defenders responsible for Windows systems, particularly those using Windows Backup Engine, should assess exposure and apply patches to prevent local privilege elevation.

Why it matters

CVE-2026-70184 is a high-severity elevation of privilege vulnerability in Windows Backup Engine, allowing authorized attackers to elevate privileges locally. Defenders should prioritize verifying exposure, applying patches, and monitoring for potential local privilege elevation attempts.

  • Verify and prioritize patching for Windows Backup Engine to prevent local privilege elevation
  • Assess exposure for affected Windows versions and prioritize remediation
  • Monitor for potential local privilege elevation attempts
  • Verify affected versions and apply patches or compensating controls

Technical summary

The Windows Backup Engine Elevation of Privilege Vulnerability allows an authorized attacker to elevate privileges locally due to improper resolution of path equivalence in Windows Backup Engine. This vulnerability impacts Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 23H2, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1, and Windows 11 Version 26. Defenders should prioritize verifying exposure and applying patches for Windows Backup Engine, focusing on local privilege elevation risks.

Defensive priority

Defenders should prioritize verifying exposure and applying patches for Windows Backup Engine, focusing on local privilege elevation risks.

Recommended defensive actions

  • Verify and apply patches for Windows Backup Engine
  • Assess exposure for Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 23H2, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1, and Windows 11 Version 26
  • Monitor for local privilege elevation attempts

Evidence notes

The CVE record and source item provide details on the Windows Backup Engine Elevation of Privilege Vulnerability, including affected versions and CVSS score.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-70184 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-70184

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-70184 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-70184

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Windows Backup Engine Elevation of Privilege Vulnerability

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/70xxx/CVE-2026-70184.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70184

    Supplemental source - vendor-advisory, patch

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.