← Back to search

CVE-2026-96848

5.5 MEDIUM

Published 2026-10-13 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-126

Vendors

microsoft

Products

windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 23h2, windows server 2019, windows server 2022, windows server 2025

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.