{"id":"CVE-2026-96914","published":"2026-10-13T19:22:02.350","lastModified":"2026-10-16T16:22:58.280","description":"Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-122","CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96914","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A Windows Virtualization-Based Security (VBS) Enclave integer overflow allows authorized users to escalate privileges locally. This vulnerability can be exploited by an attacker who already has a low-privilege account on the system.","exploitability":"Exploitation is moderately difficult and requires an attacker with local access to leverage the integer overflow in VBS enclaves, which may involve crafting specific memory operations or data structures to trigger the wraparound condition.","blast_radius":"If exploited, this vulnerability could allow attackers to gain SYSTEM-level privileges on Windows systems with VBS enabled, potentially leading to full system compromise and lateral movement across the network.","remediation":"Apply the latest Windows updates that include the fix for CVE-2026-96914, specifically targeting Windows 10 version 22H2 and Windows 11 version 22H2 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","vbs","windows"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:18:32.978Z"}}