CVE-2026-96085

Vendor

Microsoft

Product

Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2

CVSS v3.1

7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-122

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 42
   CVE NVD 4h ago

   Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

   Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-96085 Microsoft
2. 34
   Advisory MSRC 7h ago

   Windows Installer Elevation of Privilege Vulnerability

   Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

   CVE-2026-96085 Microsoft