CVE-2026-96929
7.8HighPublished 13 Oct 2026 · NVD status: Undergoing Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-122
Impact
A local attacker with standard user access can gain SYSTEM privileges and fully compromise the host. They must already have valid credentials or local code execution to trigger the flaw.
Root cause
A heap-based buffer overflow in the Windows Kernel allows corrupted memory to execute arbitrary code with elevated privileges.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Install the corresponding Microsoft security update for CVE-2026-96929 once identified in the MSRC guide. No interim workarounds or configuration mitigations are documented.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.