CVE-2026-66804

Name of the Vulnerable Software and Affected Versions Windows 11 (affected versions not specified)

Description Improper access control in the Windows Cross Device Service allows an authorized attacker to elevate privileges locally. The issue occurs because a standard user can create the C:ProgramDataCrossDevice directory, which is absent on vulnerable installations. This allows for an attacker-controlled DLL load in the FrameServer, which can be combined with the SeImpersonatePrivilege of the LocalService token to obtain SYSTEM privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.