CVE-2026-96911

Improper link resolution before file access ('link following') in Microsoft Windows Search…

Risk score: 63/100
CVSS: 7.8 v3.1
Exploit chance (30 days): 0.4%
Published: 13 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Affected: Microsoft Windows 10 1607
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Amber

CVSS 7.8 high
On your watchlist: windows server

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96911

Original description

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Last activity 13 Oct 2026. Patch Forecast updates every hour.