AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-55013

Microsoft Windows Remote Help: spoofing

Microsoft

CVE-2026-55013 · Published Aug 20, 2026 · updated Aug 26, 2026

High7.1
Fix: upgrade to 5.2.1040.0 or later
Microsoft advisory

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally.

Affected versions

PackageAffectedFixed in
Windows Remote Help
Product
>= 5.0.0.0, < 5.2.1040.05.2.1040.0
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-427

More Microsoft advisories

All Microsoft
High 7.7Aug 20Microsoft Copilot in Azure: server-side request forgeryCVE-2026-69855no fix yetMedium 6.5Aug 20Microsoft Office Word: improper input validationCVE-2026-70105fixed in 16.112.26081010 +1High 8.6Aug 20Microsoft Azure Stack HCI: unauthorized attacker could disclose information overCVE-2026-69519no fix yetHigh 8.5Aug 20Microsoft Azure Virtual Machines: server-side request forgeryCVE-2026-69543no fix yetCritical 10.0Aug 20Microsoft Azure ARC: improper authorizationCVE-2026-69555no fix yetHigh 8.6Aug 20Microsoft Partner Center: insecure direct object referenceCVE-2026-69558no fix yet