MSRC credits Aretiq.AI on two September Windows findings

Microsoft credits E. Cooper with Aretiq.AI on PowerShell security-feature bypass and Windows Print Spooler privilege-escalation vulnerabilities.

Bug class: Path-validation bypass and race-condition privilege escalation
Affected codebase: Microsoft PowerShell and Windows Print Spooler
Credited system: Aretiq.AI
Disclosed: September 8, 2026
Attribution: Self-reported attribution
Severity: high

Source status: Microsoft's September 2026 CVRF feed credits E. Cooper with Aretiq.AI on both accepted CVEs. Aretiq's disclosure page supplies the AI-audit workflow context.

Summary

CVE-2026-62801 is a PowerShell path-validation weakness that permits a security-feature bypass. CVE-2026-69364 is a Print Spooler race condition that can elevate a local attacker to SYSTEM. Microsoft scores the issues 6.5 and 7.1 respectively.

Attribution

MSRC names the researcher and Aretiq.AI on both records. The vendor credit corroborates acceptance; Aretiq’s own material is the source for the claim that the named platform performed an LLM-augmented audit, so the workflow label remains self-reported.

References

Catalogued in the Bugflation public ledger. Disagree with the attribution or severity label? Email the desk.