cve 2026 49176

CVE-2026-49176 is a Windows WalletService vulnerability that allows a local attacker with an ordinary user account to escalate privileges to NT AUTHORITY\SYSTEM. Microsoft rates it as Important with a CVSS 3.1 score of 7.8. The issue stems from a user-controlled Documents location being treated as trusted service storage, reachable through a documented Windows Wallet API. This is not a remote exploit; the attacker must already have code execution. Windows updates address this vulnerability, and the tag covers related security advisories, technical analysis, and mitigation steps for Windows users and IT administrators.