CRITICAL
LegacyUpdate
CVE published 2026-10-13
CVE-2026-97381
The Legacy Update ActiveX control vulnerability in versions 1.12.0 through 1.13.1 allows unauthorized actions on vulnerable systems. This origin validation error enables attackers to induce users to visit malicious webpages in Internet Explorer and invoke the control to enumerate update and system information, install updates without consent, display dialogs, or restart the computer. Defenders of legacy W [truncated]