CVE-2026-44810 is an improper authentication vulnerability (CWE-287) affecting Windows Cryptographic Services in Microsoft Windows 11 version 23H2 (build 10.0.22631.0). The vulnerability enables an unauthorized local attacker to elevate privileges, potentially gaining high confidentiality, integrity, and availability impact. The CVSS 3.1 base score is 8.4, indicating high severity. Microsoft has published an official fix for this vulnerability, as documented in their security update guide.

Successful exploitation allows a local attacker to elevate privileges on the affected Windows 11 system, potentially leading to full system compromise with high impact on confidentiality, integrity, and availability.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as soon as possible to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44810 for detailed patch information and deployment instructions.