CVE-2026-96188
7.3 HIGH 7.3External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.