CVE-2026-88213
Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVSS
7.8
Alta
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 de nov. de 2026 · Última mod.: 11 de nov. de 2026 · CWE-197
Ainda não há histórico EPSS suficiente.
Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1209753.1 BAI—
——0On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certificate retrieval enabled, a malicious packet may cause the AutoCertMgmt process to be terminated unexpectedly. Managed X.509 certificates will not be renewed automatically and may eventually expire, potentially disrupting TLS-dependent services.11hCVE-2026-1199887.1 ALT—
——0Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.12hCVE-2026-1198754.0 MÉD—
——0Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.11hCVE-2026-1129817.8 ALT—
——0Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.10hCVE-2026-1127657.0 ALT—
——0Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.10hCVE-2026-1127545.5 MÉD—
——0Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.10h