CVE-2026-96868

Published: Oct 13, 2026Modified: Oct 26, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Affected (7)

Products: Microsoft: Windows 11 24h2, Windows 11 25h2, Windows 11 26h2, Windows Server 2025

4 products

Windows 11 24h2

Windows 11 25h2

Windows 11 26h2

Windows Server 2025

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 11 24h2	version < 10.0.26100.9711
Microsoft Windows 11 24h2	version < 10.0.26100.9711
Microsoft Windows 11 25h2	version < 10.0.26200.9711
Microsoft Windows 11 25h2	version < 10.0.26200.9711
Microsoft Windows 11 26h2	version < 10.0.26300.9711
Microsoft Windows 11 26h2	version < 10.0.26300.9711
Microsoft Windows Server 2025	version < 10.0.26100.33650

Related CWEs

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96868

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.