Critical Zero-Day Vulnerability in Windows CTFMON Disclosed
Article Content
- •CVE-2026-45586 allows local privilege escalation to SYSTEM level.
- •Microsoft rated the vulnerability as 'Important' with a CVSS score of 7.8.
- •Immediate deployment of security updates is recommended for Windows administrators.
On June 9, 2026, Microsoft published a security update addressing a zero-day vulnerability in the Windows Collaborative Translation Framework (CTFMON), tracked as CVE-2026-45586. This flaw allows local attackers with low privileges to escalate their access to SYSTEM level, posing a significant risk for exploitation. The vulnerability is rated as 'Important' with a CVSS score of 7.8, indicating a serious threat to affected systems. Windows administrators are urged to deploy the security updates immediately to mitigate potential attacks. The flaw's exploitation could lead to unauthorized access and control over vulnerable systems, making it a valuable target for threat actors. As of the publication date, there are no confirmed reports of active exploitation, but the potential for misuse remains high.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Microsoft and CVE-2026-45586 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…