CVE-2026-96921

MediumCVSS 5.5/10Last modified Oct 16, 2026

Description

Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-843

Affected software

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 16, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-969237.0Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.CVE-2026-969249.8Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.CVE-2026-969255.5Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.CVE-2026-969265.5Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.CVE-2026-969275.5Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.CVE-2026-969287.8Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-969297.8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-96933.5Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a user is removed from oCVE-2026-969305.5Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.CVE-2026-969317.8Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-969327.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authoCVE-2026-969337.8Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96921: Medium severity, CVSS 5.5 | Vulnix