{"id":"CVE-2026-96913","published":"2026-10-13T19:22:02.197","lastModified":"2026-10-16T16:22:58.063","description":"Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96913","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in the Windows kernel allows authenticated attackers to escalate their privileges locally. This vulnerability can be exploited by writing beyond allocated memory boundaries in kernel heap structures, potentially leading to arbitrary code execution with kernel-level privileges.","exploitability":"Exploitation requires local authentication and is moderately difficult to achieve, needing precise memory layout knowledge and careful crafting of input data to trigger the buffer overflow in kernel memory space.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full system compromise with kernel-level privileges, potentially enabling persistence, credential theft, or lateral movement across the network.","remediation":"Apply the latest Windows updates including KB5042378 for Windows 10 version 22H2 and KB5042379 for Windows 11 version 22H2, or upgrade to Windows 11 version 23H2 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["priv-esc","kernel","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:18:27.174Z"}}