Microsoft PowerToys Tampering Vulnerability

Summary

Vulnerabilities 1

• Medium 5.5
  CVE-2026-83681 Public exploit

  Microsoft PowerToys Tampering Vulnerability

  Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.

  Microsoft Microsoft PowerToys
  Oct 13, 2026

Revision history

1. 2026-11-10 #3

   Updated an acknowledgement. This is an informational change only.

2. 2026-11-04 #2

   Updated an acknowledgement. This is an informational change only.

3. 2026-10-13 #1

   Information published.

References

• CVE-2026-83681 Microsoft PowerToys Tampering Vulnerability - HTML
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83681
• Microsoft Exploitability Index
  https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
• Microsoft Support Lifecycle
  https://support.microsoft.com/lifecycle
• Common Vulnerability Scoring System
  https://www.first.org/cvss