CVE-2026-96911
HighCVSS 7.8Summary
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could use symbolic links to access protected files or perform operations with elevated privileges.
Recommendation
Apply security patches and restrict creation of symbolic links for unprivileged users.
Other vulnerabilities in Windows Search Component
See all- CVE-2026-83850High
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-69453Medium
A missing authorization vulnerability in the Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
Original NVD description (English source)
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS