Medium · 5.5 CVE-2026-69554 EUVD-2026-73019GHSA-5q4w-2j92-q4ww

Microsoft Windows Search Component Tampering Vulnerability

Published Sep 8, 2026 · Updated Nov 10, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Windows 10 Version 1607 Product: Windows 10 Version 1809 Product: Windows 10 Version 21H2 Product: Windows 10 Version 22H2 Product: Windows 11 version 23H2 Product: Windows 11 Version 24H2 Product: Windows 11 Version 25H2 Product: Windows 11 version 26H1 Product: Windows Server 2012 Product: Windows Server 2012 (Server Core installation) Product: Windows Server 2012 R2 Product: Windows Server 2012 R2 (Server Core installation) Product: Windows Server 2016 Product: Windows Server 2016 (Server Core installation) Product: Windows Server 2019 Product: Windows Server 2019 (Server Core installation) Product: Windows Server 2022 Product: Windows Server 2025 Product: Windows Server 2025 (Server Core installation) Platform: Windows

Description

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows 10 Version 1607	10.0.14393.0 – < 10.0.14393.9512	10.0.14393.9512
Microsoft	Windows 10 Version 1809	10.0.17763.0 – < 10.0.17763.9245	10.0.17763.9245
Microsoft	Windows 10 Version 21H2	10.0.19044.0 – < 10.0.19044.7725	10.0.19044.7725
Microsoft	Windows 10 Version 22H2	10.0.19045.0 – < 10.0.19045.7725	10.0.19045.7725
Microsoft	Windows 11 version 23H2	10.0.22631.0 – < 10.0.22631.7582	10.0.22631.7582
Microsoft	Windows 11 Version 24H2	10.0.26100.0 – < 10.0.26100.9445	10.0.26100.9445
Microsoft	Windows 11 Version 25H2	10.0.26200.0 – < 10.0.26200.9445	10.0.26200.9445
Microsoft	Windows 11 version 26H1	10.0.28000.0 – < 10.0.28000.2954	10.0.28000.2954
Microsoft	Windows Server 2012	6.2.9200.0 – < 6.2.9200.26349	6.2.9200.26349
Microsoft	Windows Server 2012 (Server Core installation)	6.2.9200.0 – < 6.2.9200.26349	6.2.9200.26349
Microsoft	Windows Server 2012 R2	6.3.9600.0 – < 6.3.9600.23398	6.3.9600.23398
Microsoft	Windows Server 2012 R2 (Server Core installation)	6.3.9600.0 – < 6.3.9600.23398	6.3.9600.23398
Microsoft	Windows Server 2016	10.0.14393.0 – < 10.0.14393.9512	10.0.14393.9512
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0 – < 10.0.14393.9512	10.0.14393.9512
Microsoft	Windows Server 2019	10.0.17763.0 – < 10.0.17763.9245	10.0.17763.9245
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 – < 10.0.17763.9245	10.0.17763.9245
Microsoft	Windows Server 2022	10.0.20348.0 – < 10.0.20348.5622	10.0.20348.5622
Microsoft	Windows Server 2025	10.0.26100.0 – < 10.0.26100.33438	10.0.26100.33438
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 – < 10.0.26100.33438	10.0.26100.33438

Advisories 2

WID-SEC-2026-3243 Microsoft Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2026
MSRC-CVE-2026-69554 Microsoft Windows Search Component Tampering Vulnerability Microsoft Security Response Center · Sep 8, 2026

References

Microsoft Windows Search Component Tampering Vulnerability vendor-advisory patch