Windows Backup Engine vulnerabilities
6 known CVE vulnerabilities in Windows Backup Engine, translated and rated.
- CVE-2026-70184High
An improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
- CVE-2026-62687Medium
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
- CVE-2026-108135High
An improper link resolution before file access ('link following') vulnerability in the Windows Backup Engine allows an authorized attacker to elevate privileges locally.
- CVE-2026-62908High
Concurrent execution using shared resource with improper synchronization (race condition) in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
- CVE-2026-58598High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
- CVE-2026-50406High
A use-after-free vulnerability in the Windows Backup Engine allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

