CVE-2026-96911: Microsoft Windows Search Component Elevation of Privilege Vulnerability
Published Oct 13, 2026
·Updated
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Other sources
Microsoft Windows Search Component Elevation of Privilege Vulnerability
— Microsoft
Affected Software
1 affected component
Microsoft Windows Search Component
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:01 PM
Data Sourced
via MITRE·07:01 PM
DescriptionSeverity
Frequently Asked Questions
1
What access must an attacker already have to exploit this issue?
The attacker must already be authorized on the affected system and able to execute an attack locally. The available data does not indicate remote or unauthenticated exploitation.
2
What is the potential impact after successful exploitation?
Successful exploitation can elevate privileges locally. The supplied CVSS vector indicates high potential impact to confidentiality, integrity, and availability.