Summary
Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How could an attacker exploit this vulnerability?
An authenticated attacker could exploit this vulnerability by causing the affected service to become unavailable and impersonating it when it restarts. Successful exploitation could allow the attacker to intercept or alter security operations. User interaction is not required.
Security updates
10.0.26300.9711 — https://support.microsoft.com/help/5127648
10.0.17763.9376 — https://support.microsoft.com/help/5126651
10.0.20348.5761 — https://support.microsoft.com/help/5126655
10.0.19044.7807 — https://support.microsoft.com/help/5126657
10.0.26100.33650 — https://support.microsoft.com/help/5126646
10.0.22631.7652 — https://support.microsoft.com/help/5126653
10.0.28000.3231 — https://support.microsoft.com/help/5127646
Vulnerabilities 1
-
High 8.8
Windows Credential Guard Spoofing Vulnerability
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-70580 Windows Credential Guard Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70580
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss