CVE-2026-96038
Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locall
CVSS
7.8
Alto
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 nov 2026 · Última mod.: 11 nov 2026 · CWE-822 · CWE-829
Sin historial EPSS suficiente todavía.
Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-961687.0 ALT—
——0Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.5hCVE-2026-961397.0 ALT—
——0Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.5hCVE-2026-961297.8 ALT—
——0Inclusion of functionality from untrusted control sphere in Windows Kernel allows an authorized attacker to elevate privileges locally.5hCVE-2026-961247.0 ALT—
——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.5hCVE-2026-961227.8 ALT—
——0Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.5hCVE-2026-960737.0 ALT—
——0Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.5h