Vulnerabilities

Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.

Use after free in Windows Credential User Interface allows an authorized attacker to elevate privileges locally.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Microsoft

Product

Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2

CVSS v3.1

7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-416

Exposure class

Operating system

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-96978 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 36
   CVE NVD 3h ago

   Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-96973 Microsoft
2. 36
   CVE NVD 3h ago

   Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-96971 Microsoft
3. 35
   CVE NVD 3h ago

   Use after free in DNS Server allows an authorized attacker to elevate privileges locally.

   CVSS 6.7 CVE-2026-96179 Microsoft
4. 42
   CVE NVD 3h ago

   Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-96171 Microsoft
5. 36
   CVE NVD 3h ago

   Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-96124 Microsoft
6. 36
   CVE NVD 3h ago

   Use after free in Windows DIAL Client allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-96076 Microsoft
7. 36
   CVE NVD 3h ago

   Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-96073 Microsoft
8. 42
   CVE NVD 3h ago

   Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-96072 Microsoft
9. 36
   CVE NVD 3h ago

   Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-96061 Microsoft
10. 42
    CVE NVD 3h ago

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-96047 Microsoft
11. 42
    CVE NVD 3h ago

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-96046 Microsoft
12. 42
    CVE NVD 3h ago

    Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-96043 Microsoft
13. 36
    CVE NVD 3h ago

    Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-96042 Microsoft
14. 36
    CVE NVD 3h ago

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-96035 Microsoft
15. 36
    CVE NVD 3h ago

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-96027 Microsoft
16. 42
    CVE NVD 3h ago

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-96026 Microsoft
17. 36
    CVE NVD 3h ago

    Use after free in Windows Push Notification Core allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-96023 Microsoft
18. 42
    CVE NVD 3h ago

    Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-96008 Microsoft
19. 23
    Advisory MSRC 6h ago

    Windows Credential User Interface Elevation of Privilege Vulnerability

    CVE-2026-96978 Microsoft