CVE-2026-96917

Summary

A heap-based buffer overflow in the Windows PCI Bus Driver allows a local attacker with authorized access to elevate their privileges to SYSTEM level. This vulnerability can be exploited by an authenticated user to gain full control over the affected system.

Exploitability

Exploitation requires a local authenticated user with existing access to the system, making it moderately difficult to achieve but not highly complex, as the attacker already has login credentials and can execute code in their session context.

Blast radius

If exploited, this vulnerability could allow an attacker to gain SYSTEM-level privileges on any affected Windows 10 or Windows 11 device, potentially leading to full system compromise across enterprise environments.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the Windows Update KB5042879 for Windows 10 1809, Windows 10 21H2, Windows 10 22H2, Windows 11 23H2, Windows 11 24H2, and Windows 11 25H2, or KB5042880 for Windows 11 26H1.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.