CVE Catalog

CVE-2026-102204

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.34%

26th percentile - higher than 26% of all known CVEs

Summary

Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with local access may elevate their privileges on the system, potentially leading to further host compromise. This requires prior authorized access.

Recommendation

Apply Windows updates containing the fix for Windows Subsystem for Linux. Restrict local access to untrusted users and monitor for privilege escalation attempts.

Other vulnerabilities in Windows Subsystem for Linux

See all
Original NVD description (English source)

Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS