CVE-2026-96914

Summary

A Windows Virtualization-Based Security (VBS) Enclave integer overflow allows authorized users to escalate privileges locally. This vulnerability can be exploited by an attacker who already has a low-privilege account on the system.

Exploitability

Exploitation is moderately difficult and requires an attacker with local access to leverage the integer overflow in VBS enclaves, which may involve crafting specific memory operations or data structures to trigger the wraparound condition.

Blast radius

If exploited, this vulnerability could allow attackers to gain SYSTEM-level privileges on Windows systems with VBS enabled, potentially leading to full system compromise and lateral movement across the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the latest Windows updates that include the fix for CVE-2026-96914, specifically targeting Windows 10 version 22H2 and Windows 11 version 22H2 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.