CVE-2026-96910
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVSS
5.5
Medium
EPSS
0.4%
p32
KEV
—
Exploit Today
10
0-100
Published: Oct 13, 2026 · Last modified: Oct 13, 2026 · CWE-822
Not enough EPSS history yet.
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-969337.8 HIG23.1%
——7Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.2dCVE-2026-969317.8 HIG23.1%
——7Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.2dCVE-2026-969249.8 CRI58.6%
——18Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.2dCVE-2026-968477.8 HIG23.1%
——7Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.2dCVE-2026-962167.0 HIG15.5%
——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.2dCVE-2026-882198.8 HIG54.5%
——16Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.2d