CVE Watch10 nov 2026

CVE-2026-95960

Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to el

CVSS

8.8

Alto

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 10 nov 2026 · Última mod.: 10 nov 2026 · CWE-843

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

Referencias oficiales

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95960

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-970137.8 ALT

—

——0Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.4h CVE-2026-960287.8 ALT

—

——0Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.4h CVE-2026-1199936.5 MED

—

——0Access of resource using incompatible type ('type confusion') in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.4h CVE-2026-1169226.5 MED

—

——0Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.3h CVE-2026-1127537.0 ALT

—

——0Access of resource using incompatible type ('type confusion') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.4h CVE-2026-1127527.8 ALT

—

——0Improper access control in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.4h