PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-96848 Microsoft CVE debrief

The Windows Win32 Kernel Subsystem Information Disclosure Vulnerability (CVE-2026-96848) is a buffer over-read issue that allows an authorized attacker to disclose information locally. This vulnerability affects multiple Windows versions, including Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 23H2, Windows Server 2019, Windows Server 2022, and Windows Server 2025. Defenders should verify exposure, especially in systems with local access, and prioritize patching or compensating controls. The CVE record, published on 2026-10-13T19:00:33.828Z, provides further details. Review official advisories and CVE records for scope, severity, and

Vendor
Microsoft
Product
Windows 10 Version 1809
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-13
Original CVE updated
2026-10-13
Advisory published
2026-10-13
Advisory updated
2026-10-13

Who should care

Defenders responsible for Windows 10, Windows 11, and Windows Server systems, especially those with local access, should assess exposure and prioritize patching or compensating controls.

Why it matters

The Windows Win32 Kernel Subsystem Information Disclosure Vulnerability allows an authorized attacker to disclose information locally, requiring defenders to verify exposure and prioritize patching or compensating controls.

  • Verify exposure in Windows systems with local access
  • Assess the need for patching or compensating controls
  • Monitor system logs for potential information disclosure attempts

Technical summary

The Windows Win32 Kernel Subsystem has a buffer over-read vulnerability, allowing an authorized attacker to disclose information locally. Affected products include Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 11 version 23H2, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Defensive priority

Defenders should prioritize verifying exposure in Windows 10, Windows 11, and Windows Server systems, especially those with local access, and assess the need for patching or compensating controls.

Recommended defensive actions

  • Verify exposure in Windows 10, Windows 11, and Windows Server systems
  • Assess the need for patching or compensating controls
  • Monitor system logs for potential information disclosure attempts

Evidence notes

The CVE record and source item provide details on the vulnerability in Windows Win32 Kernel Subsystem, allowing an authorized attacker to disclose information locally. However, specific details on exploitation, impact, and remediation are limited.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-96848 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-96848

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-96848 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-96848

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.