PULSE
ENPT
FEED
ransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransombyod reclama a Providence · Healthcareransombyod reclama a Toyota · JP · Manufacturingransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technologyransombooba project reclama a Georgetown Sleep Center · US · Healthcareransombooba project reclama a Collier Sports Medicine and Orthopedic Center · US · Healthcareransombooba project reclama a El Portal Imaging Center · MX · Healthcareransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransombyod reclama a Providence · Healthcareransombyod reclama a Toyota · JP · Manufacturingransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technologyransombooba project reclama a Georgetown Sleep Center · US · Healthcareransombooba project reclama a Collier Sports Medicine and Orthopedic Center · US · Healthcareransombooba project reclama a El Portal Imaging Center · MX · Healthcare
← Todos los CVEs
CVE Watch10 nov 2026

CVE-2026-96028

Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges local

CVSS

7.8

Alto

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 10 nov 2026 · Última mod.: 10 nov 2026 · CWE-822 · CWE-843

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-970137.8 ALT
—
——0Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.4hCVE-2026-961687.0 ALT
—
——0Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.4hCVE-2026-961397.0 ALT
—
——0Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.4hCVE-2026-961247.0 ALT
—
——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.4hCVE-2026-961227.8 ALT
—
——0Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.4hCVE-2026-960737.0 ALT
—
——0Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.4h