{"id":"CVE-2026-96086","aliases":[],"cve":{"records":[{"id":"CVE-2026-96086","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T18:10:59.046Z","published":"2026-11-10T18:17:36.098Z","modified":"2026-11-13T18:06:28.314Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-11-13T18:06:28.314Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-11T01:32:26.583Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96086","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-125","description":"CWE-125: Out-of-bounds Read","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.19044.0","versionEndExcluding":"10.0.19044.7846"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.19045.0","versionEndExcluding":"10.0.19045.7846"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.20348.0","versionEndExcluding":"10.0.20348.5870"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*","versionStartIncluding":"10.0.22631.0","versionEndExcluding":"10.0.22631.7711"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*","versionStartIncluding":"10.0.22631.0","versionEndExcluding":"10.0.22631.7711"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:x64:*","versionStartIncluding":"10.0.26100.0","versionEndExcluding":"10.0.26100.9974"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:x64:*","versionStartIncluding":"10.0.26200.0","versionEndExcluding":"10.0.26200.9974"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_11_version_26h2_for_x64-based_systems:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.26300.0","versionEndExcluding":"10.0.26300.9974"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.26100.0","versionEndExcluding":"10.0.26100.33822"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.26100.0","versionEndExcluding":"10.0.26100.33822"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*","versionStartIncluding":"10.0.28000.0","versionEndExcluding":"10.0.28000.3501"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-11T01:32:17.584812Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Windows WLAN Service Denial of Service Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.","score":6.5,"severity":"medium","published":"2026-11-10T18:17:36.098Z","modified":"2026-11-13T18:06:28.314Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Windows 10 Version 21H2","platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.19044.0","status":"affected","lessThan":"10.0.19044.7846","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"},{"vendor":"Microsoft","name":"Windows 10 Version 22H2","platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.19045.0","status":"affected","lessThan":"10.0.19045.7846","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"},{"vendor":"Microsoft","name":"Windows 11 version 23H2","platforms":["ARM64-based Systems"],"versions":[{"version":"10.0.22631.0","status":"affected","lessThan":"10.0.22631.7711","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"},{"vendor":"Microsoft","name":"Windows 11 Version 23H2","platforms":["x64-based Systems"],"versions":[{"version":"10.0.22631.0","status":"affected","lessThan":"10.0.22631.7711","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"},{"vendor":"Microsoft","name":"Windows 11 Version 24H2","platforms":["ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.9974","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"},{"vendor":"Microsoft","name":"Windows 11 Version 25H2","platforms":["ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.26200.0","status":"affected","lessThan":"10.0.26200.9974","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"},{"vendor":"Microsoft","name":"Windows 11 version 26H1","platforms":["ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.28000.0","status":"affected","lessThan":"10.0.28000.3501","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"},{"vendor":"Microsoft","name":"Windows 11 Version 26H2","platforms":["ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.26300.0","status":"affected","lessThan":"10.0.26300.9974","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"},{"vendor":"Microsoft","name":"Windows Server 2022","platforms":["x64-based Systems"],"versions":[{"version":"10.0.20348.0","status":"affected","lessThan":"10.0.20348.5870","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"},{"vendor":"Microsoft","name":"Windows Server 2025","platforms":["x64-based Systems"],"versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.33822","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"},{"vendor":"Microsoft","name":"Windows Server 2025 (Server Core installation)","platforms":["x64-based Systems"],"versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.33822","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96086"],"sources":[{"name":"CVE","id":"CVE-2026-96086","modified":"2026-11-13T18:06:28.314Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","score":6.5}],"sourceAffected":[],"observedAt":"2026-11-13T19:28:12.348Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:35:33.875Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-11T02:25:34.754Z","attemptedAt":"2026-11-11T02:25:34.754Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-11T02:25:34.856Z","attemptedAt":"2026-11-11T02:25:34.856Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-11T02:25:34.228Z","attemptedAt":"2026-11-11T02:25:34.228Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-11T02:25:34.144Z","attemptedAt":"2026-11-11T02:25:34.144Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-121800","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-121800","modified":"Nov 11, 2026, 1:32:26 AM","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","checkedAt":"2026-11-11T02:25:34.228Z"},{"source":"NVD","id":"CVE-2026-96086","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96086","modified":"2026-11-11T02:17:21.457","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","checkedAt":"2026-11-11T02:25:34.754Z"},{"source":"GitHub Advisory Database","id":"GHSA-4623-w6w9-jjxg","url":"https://github.com/advisories/GHSA-4623-w6w9-jjxg","modified":"2026-11-10T21:34:23Z","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","checkedAt":"2026-11-11T02:25:34.856Z"}],"aiSummary":{"text":"The Windows WLAN Service in Microsoft Windows 10 and 11, and Windows Server 2022 and 2025, has an out-of-bounds read vulnerability, allowing an unauthorized attacker to deny service over an adjacent network. Affected versions include Windows 10 21H2 and 22H2, Windows 11 23H2, 24H2, 25H2, and 26H1, and Windows Server 2022 and 2025. An attacker needs adjacent network access to exploit this vulnerability.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T01:56:12.734Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-96086"}]}}