CVE-2026-88230

Vendor

Microsoft

Product

Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2

CVSS v3.1

7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-122

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 62
   Tenable research Tenable 4h ago

   Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

   63 Critical 1029 Important 1 Moderate 0 Low Microsoft addresses 1093 CVEs in the eleventh Patch Tuesday of 2026. Microsoft patched 1093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1029 rated as…

   Exploited CVSS 6.5 Fix available CVE-2026-124194CVE-2026-118146CVE-2026-120002+17 more Microsoft
2. 42
   CVE NVD 4h ago

   Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

   Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-88230 Microsoft
3. 29
   Advisory MSRC 7h ago

   Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

   Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

   CVE-2026-88230 Microsoft