---
id: "CVE-2026-112974"
page: "https://infrastack.ai/live/CVE-2026-112974"
kind: "vulnerability"
aliases: ["CVE-2026-112974"]
title: "Microsoft Account: improper access control lets a local user tamper"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "other"
products: [{"name": "Microsoft Account", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["microsoft-account", "other"]
not_affected_if: []
published_at: "2026-11-10T19:18:48+00:00"
first_seen_at: "2026-11-10T19:24:36+00:00"
updated_at: "2026-11-10T20:02:06+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112974", "first_seen_at": "2026-11-10T19:24:36+00:00"}]
exploit_sources: []
---

# Microsoft Account: improper access control lets a local user tamper

Link for people: https://infrastack.ai/live/CVE-2026-112974 (this .md is for agents)

Microsoft Account has an improper access control flaw that lets an authorized attacker tamper with data on the machine. The sources give no further detail on what data or which versions are affected.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Account affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T19:24:36+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112974

## From the sources

Improper access control in Microsoft Account allows an authorized attacker to perform tampering locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_