Skip to main content
CVE-2026-99225VulnerabilityPublished Updated

process keyring searches · keys: Check the authorization payload

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-99225· High

Not known to be exploited · fixed in b86db7993051d05810601654e886a1e78e1fa495 : patch Microsoft soon.

Data as of 7 Nov 2026, 12:48 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in b86db7993051d05810601654e886a1e78e1fa495, b4dfda438fee3c6faa15d9b421c373de6a0e476f, 26949c2e4c461e9e620e935bc22717f36a40b615 +6

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 2 Nov 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 7 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ e59428f721ee096d8a020504ea908a6f0d952735, < b86db7993051d05810601654e886a1e78e1fa495
Fixed in
  • b86db7993051d05810601654e886a1e78e1fa495
LinuxLinuxAffected
  • ≥ e59428f721ee096d8a020504ea908a6f0d952735, < b4dfda438fee3c6faa15d9b421c373de6a0e476f
Fixed in
  • b4dfda438fee3c6faa15d9b421c373de6a0e476f
LinuxLinuxAffected
  • ≥ e59428f721ee096d8a020504ea908a6f0d952735, < 26949c2e4c461e9e620e935bc22717f36a40b615
Fixed in
  • 26949c2e4c461e9e620e935bc22717f36a40b615
LinuxLinuxAffected
  • ≥ e59428f721ee096d8a020504ea908a6f0d952735, < 984a178d54515779a1bee100b92a6cee8777c830
Fixed in
  • 984a178d54515779a1bee100b92a6cee8777c830
LinuxLinuxAffected
  • ≥ e59428f721ee096d8a020504ea908a6f0d952735, < 458cf9715af6aff3ac8d2ec60bd59e9d6236fd0f
Fixed in
  • 458cf9715af6aff3ac8d2ec60bd59e9d6236fd0f
LinuxLinuxAffected
  • ≥ e59428f721ee096d8a020504ea908a6f0d952735, < 49f4e768540d25d8852ef750313afda6a4774871
Fixed in
  • 49f4e768540d25d8852ef750313afda6a4774871

Description

CVE-2026-99225 is a vulnerability related to the authorization payload check in process keyring searches in Microsoft software version 3.0. No detailed technical information or impact description is provided. There is no CVSS score or known exploit in the wild reported.

References

Community reviews

Loading reviews…