CVE-2026-68896
7.8 · HighLocal privilege escalation in the Windows Search component
Our Windows Search investigation, from the multi-session catalogue gate to a verified SYSTEM delete and a carefully bounded code-execution chain.
Vulnerability class
Unfiltered path segments that take an operation out of its intended directory.
1 write-up, 1 vulnerability
CVE-2026-68896
7.8 · HighOur Windows Search investigation, from the multi-session catalogue gate to a verified SYSTEM delete and a carefully bounded code-execution chain.
| Identifier | Product | Vulnerability | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-68896 | Microsoft Windows | Absolute path traversal in the Windows Search component | 7.8 High |