CVE-2026-96158
Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.
CVSS
7.0
Alta
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-362 · CWE-908
Ainda não há histórico EPSS suficiente.
Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-961717.0 ALT—
——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.3hCVE-2026-961565.5 MÉD—
——0Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.3hCVE-2026-961505.6 MÉD—
——0Use of uninitialized resource in Microsoft Windows Codecs Library allows an authorized attacker to disclose information locally.3hCVE-2026-961444.7 MÉD—
——0Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.3hCVE-2026-960887.0 ALT—
——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.3hCVE-2026-960757.0 ALT—
——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate privileges locally.3h