Ad · Leaderboard 728×90

CVE-2026-96931

7.8High

Published 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash

7.8High
Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None
Impact
Full C/I/A compromise
Weakness
CWE-822

Impact

A local user with existing account access can elevate privileges to SYSTEM. The attacker requires local credentials but no user interaction.

Root cause

The NTFS driver dereferences an untrusted pointer supplied by a local caller.

Affected systems

Versions not listed — check the vendor advisory.

CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Install the Microsoft security update for your Windows version as referenced in the MSRC advisory; no documented interim workaround exists.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-96931

Ad · Sticky 320×50 / 728×90