OTPulse

Windows Kernel Security Feature Bypass Vulnerability

MonitorCVSS 5.5CVE-2026-58545Jul 14, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorLocal
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary

A Windows Kernel access control flaw allows an authorized local user to bypass a security feature. The vulnerability requires valid local user credentials and local login access; it cannot be exploited remotely. Microsoft has released patches for all affected Windows versions (10, 11, Server 2016, 2019, 2022, 2025) in the July 2026 security update.

What this means
What could happen
An authorized local user on a Windows system could bypass a security feature in the kernel, potentially gaining elevated access or circumventing security controls. This could allow unauthorized modification of system settings or access to protected resources.
Who's at risk
This affects Windows workstations and servers across all modern versions (Windows 10, Windows 11, Windows Server 2016, 2019, 2022, and 2025) running on 32-bit, x64, and ARM64 architectures. Any organization using these systems as engineering workstations, HMIs, data servers, or general IT infrastructure should apply the patch.
How it could be exploited
An attacker with a valid local user account (such as a workstation user or HMI operator) could exploit improper access control in the Windows Kernel to bypass a security feature. The attack requires local login access and user-level privileges; it cannot be executed remotely.
Prerequisites
  • Valid local user account on the Windows system
  • Local login access (cannot be exploited remotely)
  • User-level privileges
requires user-level privilegeslow complexityaffects all Windows versions
Exploitability
Unlikely to be exploited — EPSS score 0.4%
Affected products (23)
23 with fix
ProductAffected VersionsFix Status
Windows 10 Version 1809 for 32-bit SystemsAll versionsBuild 10.0.17763.9020
Windows 10 Version 1809 for x64-based SystemsAll versionsBuild 10.0.17763.9020
Windows Server 2019All versionsBuild 10.0.17763.9020
Windows Server 2019 (Server Core installation)All versionsBuild 10.0.17763.9020
Windows Server 2022All versionsBuild 10.0.20348.5386
Remediation & Mitigation
0/3
Schedule — requires maintenance window
0/1

Patching may require device reboot — plan for process interruption

HOTFIXApply the July 2026 Windows security update to your Windows systems
Long-term hardening
0/2
HARDENINGRestrict local console access to authorized personnel only
HARDENINGImplement account access controls and privilege management to limit local user accounts
View full vendor advisory
API: /api/v1/advisories/4a9dc191-bbf8-4f62-9a03-b51cf0c12bfc

Get OT security insights every Tuesday

Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.