CVE-2026-96188 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
microsoft	CNA	7.3 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 28.8%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
microsoft	powertoys	0.1 ≤ 𝑥 < 0.101.2632.0	CNA

Common Weakness Enumeration

CWE-15 - External Control of System or Configuration Setting
One or more system settings or configuration elements can be externally controlled by a user.

Vulnerability Media Exposure

[GERMAN] Microsoft Apps: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Microsoft PowerToys, Microsoft Power Apps und Microsoft Apps ausnutzen, um erweiterte Berechtigungen – einschließlich Administratorrechte – zu erlangen, beliebigen Code auszuführen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.
Published: 2026-10-13T22:00:00+00:00

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96188