CVE-2026-55013

Received Received - Intake

Windows Remote Help Defense Uncontrolled Search Path Element

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: Microsoft Corporation

Description

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-20

Last Modified

2026-08-20

Generated

2026-08-21

AI Q&A

2026-08-21

EPSS Evaluated

N/A

NVD

CVE-2026-55013

EUVD

EUVD-2026-63697

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_remote_help_defense	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability involves an uncontrolled search path element in Windows Remote Help Defense. An authorized attacker can exploit this to perform spoofing attacks locally on a system.

Impact Analysis

An attacker could exploit this to impersonate legitimate applications or services, potentially gaining unauthorized access to sensitive data or performing actions on your behalf.

Compliance Impact

The vulnerability allows local spoofing via an uncontrolled search path element, which could potentially enable unauthorized access or manipulation of data. This may impact compliance with standards like GDPR (data protection) or HIPAA (healthcare data) by increasing risks of data breaches or unauthorized disclosure.

Mitigation Strategies

Apply the latest security updates from Microsoft for Windows Remote Help Defense to patch the uncontrolled search path element vulnerability.

Hi! I’m here to help you understand CVE-2026-55013. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70