{"id":"CVE-2026-96917","published":"2026-10-13T19:22:02.880","lastModified":"2026-10-16T19:04:27.730","description":"Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["windows 10 1809","windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2019","windows server 2022","windows server 2025"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96917","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in the Windows PCI Bus Driver allows a local attacker with authorized access to elevate their privileges to SYSTEM level. This vulnerability can be exploited by an authenticated user to gain full control over the affected system.","exploitability":"Exploitation requires a local authenticated user with existing access to the system, making it moderately difficult to achieve but not highly complex, as the attacker already has login credentials and can execute code in their session context.","blast_radius":"If exploited, this vulnerability could allow an attacker to gain SYSTEM-level privileges on any affected Windows 10 or Windows 11 device, potentially leading to full system compromise across enterprise environments.","remediation":"Apply the Windows Update KB5042879 for Windows 10 1809, Windows 10 21H2, Windows 10 22H2, Windows 11 23H2, Windows 11 24H2, and Windows 11 25H2, or KB5042880 for Windows 11 26H1.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["priv-esc","local","windows"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:18:40.697Z"}}