CVE-2026-95998

MEDIUM NVD

CVSS Score 4.4

Severity MEDIUM

Published Nov 10, 2026

Vendor unknown

Description

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform tampering locally.