CVE-2026-95947
A NVD · · CVE-2026-95947
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key metrics
- CVSS
- 7.8
- EPSS
- 0%
Key insight
No insights beyond the patch information: there are no indications of active exploitation or a public exploit.
Description
The vulnerability CVE-2026-95947 affects Windows Error Reporting (WER) and allows local privilege escalation. An attacker must run a specially crafted application to exploit the insecure handling and execution of files by WER. Successful exploitation can give an attacker greater access to sensitive information and system functionality. The security update corrects how WER processes and executes files. At the time of reporting, there is no information about active exploitation or a public exploit.
Risk score
- cvss base
- 78.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 15.00
- raw before weight
- 93.00
- industry weight
- 1.21
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- 0.00
Path: operational
MITRE ATT&CK mapping
1 TTPProcedure details
| Technique | Tactic | Procedure | Conf. | Source |
|---|---|---|---|---|
| T1068 Exploitation for Privilege Escalation | Privilege Escalation | An attacker exploits CVE-2026-95947, a vulnerability in Windows Error Reporting (WER) that occurs when WER handles and executes files. By running a specially crafted application, the attacker triggers the vulnerability to gain elevated privileges and access sensitive information and system functionality. | high | llm |