CVE-2026-96915
HighCVSS 7.8Summary
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker can exploit this flaw to gain kernel privileges, posing a serious risk of full system takeover.
Recommendation
Promptly deploy Microsoft patches for kernel-mode drivers and regularly update all system drivers.
Other vulnerabilities in Windows Kernel-Mode Drivers
See all- CVE-2026-96849Medium
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
- CVE-2026-96247Medium
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
- CVE-2026-85871High
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-85857Medium
Insertion of sensitive information into log files in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
- CVE-2026-83837High
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-83834High
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-83637High
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-83568High
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-69971Medium
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
- CVE-2026-40408High
A use after free vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to locally elevate privileges.
Original NVD description (English source)
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS