Skip to content
Heist/ feed
Back to feed
Unrated

CVE-2026-70177 Microsoft Windows Search Component Elevation of Privilege Vulnerability

Type: advisorySources: Microsoft security updates

A numeric truncation error in the Windows Search Component may allow an authorized attacker to elevate privileges locally.

Products
Microsoft Windows Search Component
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-70177
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 20:32 UTC · Revision 1

Source evidence

CVE-2026-70177 Microsoft Windows Search Component Elevation of Privilege Vulnerability

official-microsoft-security-updates · Original source

Published 13 Oct 2026, 14:00 UTC

A numeric truncation error in the Windows Search Component may allow an authorized attacker to elevate privileges locally.

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Microsoft Windows Search Component

Fixed versions: Not specified

Prerequisites: authorized attacker

Complete source record
{
  "id": "45353f3f03fceb5b4f18cbc08e8d93a13947f1fbfe74ec4217cdc7a600055970",
  "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70177",
  "method": "llm",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2026-70177 Microsoft Windows Search Component Elevation of Privilege Vulnerability",
    "summary": "A numeric truncation error in the Windows Search Component may allow an authorized attacker to elevate privileges locally.",
    "evidence": "Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.",
    "products": [
      {
        "name": {
          "value": "Microsoft Windows Search Component",
          "evidence": "Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally."
        },
        "prerequisites": [
          {
            "value": "authorized attacker",
            "evidence": "allows an authorized attacker to elevate privileges locally."
          }
        ],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-70177",
        "evidence": "CVE-2026-70177 Microsoft Windows Search Component Elevation of Privilege Vulnerability"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-microsoft-security-updates",
  "document_id": 24874,
  "published_at": "2026-10-13T14:00:00+00:00"
}