CVE-2026-70348

Analyzed Analyzed - Analysis Complete

Windows Management Services Link Following Local DoS

Publication date: 2026-08-11

Last updated on: 2026-08-14

Assigner: Microsoft Corporation

Description

Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-14

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-70348

EUVD

EUVD-2026-56601

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_11_24h2	to 10.0.26100.9106 (exc)
microsoft	windows_11_24h2	to 10.0.26100.9106 (exc)
microsoft	windows_11_26h1	to 10.0.28000.2704 (exc)
microsoft	windows_11_26h1	to 10.0.28000.2704 (exc)
microsoft	windows_11_25h2	to 10.0.26200.9106 (exc)
microsoft	windows_11_25h2	to 10.0.26200.9106 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-59	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper link resolution issue in Windows Management Services that allows an authorized attacker to cause a denial of service locally by exploiting link following.

Impact Analysis

An authorized attacker could exploit this to disrupt services on your system by causing a denial of service, potentially leading to system unavailability or degraded performance.

Compliance Impact

This vulnerability allows an authorized attacker to deny service locally through improper link resolution in Windows Management Services. While it does not directly expose data, denial of service could impact availability of systems handling sensitive data, potentially affecting compliance with standards like GDPR (availability principle) or HIPAA (access controls and availability). However, specific compliance impacts depend on system configuration and deployment.

Mitigation Strategies

Apply the latest security updates from Microsoft to address the improper link resolution issue in Windows Management Services. Monitor Microsoft's update guide for patches and install them promptly.

Hi! I’m here to help you understand CVE-2026-70348. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70