CVE-2026-96158 | Microsoft Windows up to Server 2025 ActiveX Installer Service uninitialized pointer

November 11, 2026 Yanac

A vulnerability labeled as very critical has been found in Microsoft Windows. This issue affects some unknown processing of the component ActiveX Installer Service. Such manipulation leads to uninitialized pointer.

This vulnerability is traded as CVE-2026-96158. An attack has to be approached locally. There is no exploit available.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More