CVE-2026-69321 MEDIUM

CVE-2026-69321: Windows Power Dependency Coordinator Tampering Vulnerability

Vendor Microsoft
Product Windows 10 Version 1607
Weakness CWE-306 · Missing auth
Published September 8, 2026
Last update September 9, 2026
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

What the vulnerability does

01Description

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.

Key dates

02Disclosure timeline

September 8, 2026 CVE published
September 9, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-54350 WordPress Augmented-Reality Plugin Remote Code Execution Unauthenticated CVE-2025-11728 Oceanpayment CreditCard Gateway <= 6.0 - Missing Authentication to Unauthenticated Order Status Update CVE-2025-14294 Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification CVE-2024-52437 WordPress Banner System plugin <= 1.0.0 - Privilege Escalation vulnerability CVE-2026-1729 AdForest <= 6.0.12 - Authentication Bypass