CVE-2026-96939
HighCVSS 7.0Summary
Time-of-check time-of-use (TOCTOU) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit a timing window to elevate privileges, potentially leading to full system compromise.
Recommendation
Install the latest security updates from Microsoft.
Other vulnerabilities in Servicing Stack Updates
See all- CVE-2026-85365High
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- CVE-2026-85318High
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- CVE-2026-83863High
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- CVE-2026-83506High
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS