CVE-2026-49176

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

July 27, 2026

Last Seen

July 27, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Windows WalletService Vulnerability Allows Privilege Escalation to SYSTEM70.5

CVE-2026-49176 is a local privilege escalation vulnerability in Windows WalletService, allowing standard users to gain SYSTEM-level privileges. The flaw arises from improper handling of user-controlled file paths during initialization, enabling attackers to redirect WalletService to a malicious ESE...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Windows WalletService Vulnerability Allows Privilege Escalation to SYSTEM

Jul 27·3 sources

Related Articles (2)

Researchers David Carliez demonstrated

davidcarliez.github.io·Jul 27

Windows WalletService Flaw Lets Standard Users Gain SYSTEM Privileges

Gbhackers·Jul 27

Related Entities

Zero-day Exploit Malware CWE-22 - Path Traversal CWE-269 - Improper Privilege Management Cwe-59 - Improper Link Resolution Before File Access Government SparkKitty T1003 - OS Credential Dumping T1055 - Process Injection T1068 - Exploitation for Privilege Escalation T1543.003 - Windows Service Windows