{"id":"CVE-2026-105010","published":"2026-10-13T19:17:57.433","lastModified":"2026-10-16T17:17:22.677","description":"Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105010","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Microsoft Windows Search Component allows remote attackers to execute arbitrary code with system privileges by exploiting a freed memory object that is still being accessed. This represents a critical privilege escalation flaw that can be triggered over the network.","exploitability":"Exploitation is moderately difficult and requires a remote attacker with network access to trigger the vulnerable component, but does not require user interaction or specific preconditions beyond network reach to the target system.","blast_radius":"The vulnerability could affect any Windows system running the Search Component, potentially allowing attackers to gain full system control across enterprise networks with minimal user interaction.","remediation":"Apply the Microsoft Windows Update KB5068437 or later patch immediately to address this privilege escalation vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","windows","remote-exploitation","use-after-free"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:47:36.755Z"}}