CVE-2026-96857
Microsoft Windows 10 1809: information disclosure
- Risk score
- 49/100
- CVSS
- 5.5 v3.1
- Exploit chance (30 days)
- 0.4%
- Published
- 13 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.
- Affected
- Microsoft Windows 10 1809
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Story map
At a glance
Microsoft Windows 10 1809: Red, act today. Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
The flaws
- CVE-2026-96857: Information disclosure (CVSS 5.5 · EPSS 0%)
- CVE-2026-102210: Heap buffer overflow (CVSS 9.8 · EPSS 1%)
- CVE-2026-87716: Heap buffer overflow (CVSS 7.5 · EPSS 1%)
- CVE-2026-70104: Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to… (CVSS 7.8 · EPSS 0%)
The fix
Fix: Apply the vendor's security update; see the linked advisory.
Who is exposed: Microsoft Windows 10 1809
Where it stands
- No known exploitation
Connects to
- Same weakness: CWE-552 (CWE-552). 17 other warnings in 30 days
- Same product: Earlier Microsoft Windows 10 1809 warnings. 62 in the last 90 days
Why it is Yellow
- CVSS 5.5 medium
- On your watchlist: windows server
References
Original description
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.
Last activity 13 Oct 2026. Patch Forecast updates every hour.