CVE-2026-96220 in Windows

요약

\~에 의해 MITRE • 2026. 10. 14.

Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 책임이 있는: Microsoft
• 예약하다: 2026. 09. 22.
• 공개: 2026. 10. 14.
• 모더레이션: 수락
• 항목: VDB-419527
• CPE: 20261014
• CWE: CWE-269 (확인됨)
• CVSS: 7.8 (CNA)
• EPSS: 0.00745
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Telecommunication, Insurance, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-96220
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-96220
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-96220/