powertoys vulnerabilities
CVEs whose affected-version data names the powertoys package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-96188High· 7.3External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
▾ TwilightMicrosoft · Microsoft PowerToysEPSS 0.38%via NVD
CVE-2026-83681Medium· 5.5Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.
▾ SunlitMicrosoft · Microsoft PowerToysEPSS 0.34%via NVD
CVE-2026-42902High· 7.8Microsoft PowerToys Elevation of Privilege Vulnerability
Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
▾ TwilightMicrosoft · Microsoft PowerToysEPSS 0.29%via CVEORG