Skip to content
Heist/ feed
Back to feed
Unrated

CVE-2026-96911 Microsoft Windows Search Component Elevation of Privilege Vulnerability

Type: advisorySources: Microsoft security updates

An improper link-resolution flaw in Microsoft Windows Search Component may allow an authorized local attacker to elevate privileges.

Products
Microsoft Windows Search Component
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-96911
Confirmed fixed CVEs
Not specified
Updated in this feed
5 Nov 2026, 16:38 UTC · Revision 1

Source evidence

CVE-2026-96911 Microsoft Windows Search Component Elevation of Privilege Vulnerability

official-microsoft-security-updates · Original source

Published 13 Oct 2026, 14:00 UTC

An improper link-resolution flaw in Microsoft Windows Search Component may allow an authorized local attacker to elevate privileges.

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Microsoft Windows Search Component

Fixed versions: Not specified

Prerequisites: an authorized attacker

Complete source record
{
  "id": "88668216be297eb9c5a333ef2d7df19af15950aaeaadd7f2aab73a54743bc873",
  "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96911",
  "method": "llm",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2026-96911 Microsoft Windows Search Component Elevation of Privilege Vulnerability",
    "summary": "An improper link-resolution flaw in Microsoft Windows Search Component may allow an authorized local attacker to elevate privileges.",
    "evidence": "Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.",
    "products": [
      {
        "name": {
          "value": "Microsoft Windows Search Component",
          "evidence": "Improper link resolution before file access ('link following') in Microsoft Windows Search Component"
        },
        "prerequisites": [
          {
            "value": "an authorized attacker",
            "evidence": "allows an authorized attacker to elevate privileges locally"
          }
        ],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-96911",
        "evidence": "CVE-2026-96911 Microsoft Windows Search Component Elevation of Privilege Vulnerability"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-microsoft-security-updates",
  "document_id": 25781,
  "published_at": "2026-10-13T14:00:00+00:00"
}