Skip to main content

CVE-2026-47648

Windows Storage Elevation of Privilege vulnerability

Microsoft

MSRC advisory June 9, 2026

Alert details

Source feed
Microsoft MSRC
CVE ID
CVE-2026-47648
Affected products
Windows Storage Elevation of Privilege · Microsoft Windows Storage Elevation of Privilege · Microsoft

What happened

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

What it means for your business

Windows Storage Elevation of Privilege vulnerability (CVE-2026-47648) was added to Microsoft’s security update guidance. Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally. If you need help checking exposure, call (864) 335-9223.

Sources

Related briefs

Microsoft MSRC

CVE-2026-62695

Windows Storage Elevation of Privilege vulnerability

Windows Storage Elevation of Privilege vulnerability (CVE-2026-62695) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-61359

Windows Storage Elevation of Privilege vulnerability

Windows Storage Elevation of Privilege vulnerability (CVE-2026-61359) was added to Microsoft’s security update guidance. Acknowledgement Updated If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-68801

Microsoft Excel Remote Code Execution vulnerability

Microsoft Excel Remote Code Execution vulnerability (CVE-2026-68801) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-64903

Microsoft Office Remote Code Execution vulnerability

Microsoft Office Remote Code Execution vulnerability (CVE-2026-64903) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Need help patching?

PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.