CVE-2026-96043
A NVD · · CVE-2026-96043
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key metrics
- CVSS
- 7.0
- EPSS
- 0%
Key insight
There is no indication of active exploitation; the report describes a local privilege escalation whose patch information is already available via NVD.
Description
CVE-2026-96043 is a use-after-free vulnerability in the Windows Connection Manager Service. An authorized attacker with local user privileges can thereby elevate privileges on the affected system. The vulnerability affects Microsoft Windows in various versions; the NVD entry does not name specific attack vectors or active exploitation. No public exploit or inclusion in the CISA KEV list is documented at the time of reporting. The status is limited to the availability of patch information.
Risk score
- cvss base
- 70.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 70.00
- industry weight
- 1.21
- freshness factor
- 1.00
- exploitability factor
- 0.75
- days old
- 0.00
- vendor mismatch penalty
- 0.00
Path: operational