CVE-2026-88072
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
Risk of privilege escalation in environments using Host Guardian Service, potentially leading to system integrity compromise.
Recommendation
Update Windows and review Host Guardian Service configuration.
Other vulnerabilities in Windows Host Guardian Service
See all- CVE-2026-96248High
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.
- CVE-2026-87709Medium
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally. The vulnerability affects the integrity of protected resources.
- CVE-2026-69682High
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS