CVE-2026-68896
7.8 · High
Local privilege escalation in the Windows Search component
Our Windows Search investigation, from the multi-session catalogue gate to a verified SYSTEM delete and a carefully bounded code-execution chain.
Vulnerability class
Privilege escalation
A local user gains SYSTEM or root rights by abusing a privileged operation that is not properly controlled.
2 write-ups, 2 vulnerabilities
CVE-2026-81963
Highlighted 7.8 · HighLocal privilege escalation in the Windows Update Stack through link following
How our CVE-2020-0728 variant hunt led from a false CBS lead to a reproducible TrustedInstaller write and SYSTEM elevation.
Vulnerabilities
| Identifier | Product | Vulnerability | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-68896 | Microsoft Windows | Absolute path traversal in the Windows Search component | 7.8 High | |
| CVE-2026-81963 | Microsoft Windows | Link following in the Windows Update Stack | 7.8 High |