CVE-2026-55015

Received Received - Intake

Uncontrolled Search Path in Windows Remote Help

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: Microsoft Corporation

Description

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-20

Last Modified

2026-08-20

Generated

2026-08-21

AI Q&A

2026-08-21

EPSS Evaluated

N/A

NVD

CVE-2026-55015

EUVD

EUVD-2026-63696

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-427	The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability is an uncontrolled search path element in Windows Remote Help. It allows an authorized attacker to cause a denial of service locally by exploiting how the application searches for resources.

Impact Analysis

An authorized attacker could exploit this to disrupt services on your system, leading to temporary unavailability of Windows Remote Help functionality. This may cause inconvenience but does not directly expose data or allow unauthorized access.

Compliance Impact

This vulnerability primarily impacts availability rather than confidentiality or integrity. It may affect compliance if service disruption violates availability requirements in standards like GDPR or HIPAA, but no direct data exposure is indicated.

Mitigation Strategies

Apply the latest security updates from Microsoft to address the uncontrolled search path element in Windows Remote Help. Ensure Windows Remote Help is updated to the patched version to prevent denial of service attacks.

Hi! I’m here to help you understand CVE-2026-55015. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70