{"id":"CVE-2026-55013","aliases":[],"cve":{"records":[{"id":"CVE-2026-55013","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-06-16T14:12:44.284Z","published":"2026-08-20T21:45:17.747Z","modified":"2026-10-30T17:21:28.219Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-10-30T17:21:28.219Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-08-22T03:56:41.314Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55013","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-427","description":"CWE-427: Uncontrolled Search Path Element","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows-remote-help:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0.0","versionEndExcluding":"5.2.1040.0"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-08-21T00:00:00+00:00","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Windows Remote Help Defense Spoofing Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally.","score":7.1,"severity":"high","published":"2026-08-20T21:45:17.747Z","modified":"2026-10-30T17:21:28.219Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Windows Remote Help","platforms":[],"versions":[{"version":"5.0.0.0","status":"affected","lessThan":"5.2.1040.0","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-55013"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55013"],"sources":[{"name":"CVE","id":"CVE-2026-55013","modified":"2026-10-30T17:21:28.219Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-55013"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C","score":7.1}],"sourceAffected":[],"observedAt":"2026-10-30T18:29:45.550Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T18:55:34.234Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"Windows Remote Help Defense versions 5.0.0.0 to less than 5.2.1040.0 have an uncontrolled search path element weakness, allowing an authorized attacker to perform spoofing locally. The vulnerability is identified as CWE-427. An authorized attacker is required to exploit this vulnerability.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:29:38.162Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-55013"}]}}