Microsoft fixes Windows flaw linked to malicious COM objects

Microsoft has patched the CVE-2026-66804 vulnerability, a privilege escalation flaw via dangling COM object registrations.

Published 2h1 sourceNotable

≈ 20sSpeed

The fact

This flaw, reported by 15 researchers, partially fixed a previous vulnerability dubbed 'Dark Elevator'.

It allowed attackers to execute code with system-level privileges on Windows machines.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on September 21, 2026