Home Microsoft CVE-2026-3787
Back to Microsoft

CVE-2026-3787

Windows - Windows Service

Microsoft CVSS 7 Updated March 15, 2026

Executive Risk Summary

"A weakness has been identified in UltraVNC 1.6.4.0 on Windows, affecting the Windows Service component, which could lead to an uncontrolled search path. The attack requires local access and a high degree of complexity, making exploitability difficult."

Operational Audit Arsenal

Target Type DLL
Target Asset cryptbase.dll
Standard Path %windir%\System32
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: cryptbase.dll (DLL)
$Targets = 'cryptbase.dll'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Windows Service

Internal Work Notes

Investigate and monitor UltraVNC 1.6.4.0 on Windows for potential uncontrolled search path vulnerability, requiring local access and high complexity for exploitation.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Microsoft Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.