CVE-2026-96085 | Microsoft Windows up to Server 2025 Windows Installer heap-based overflow

November 11, 2026 Yanac

A vulnerability, which was classified as very critical, has been found in Microsoft Windows. The affected element is an unknown function of the component Windows Installer. The manipulation leads to heap-based buffer overflow.

This vulnerability is referenced as CVE-2026-96085. The attack can only be performed from a local environment. No exploit is available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More