{"id":"CVE-2026-96086","kind":"vulnerability","aliases":["CVE-2026-96086"],"related":[],"title":"Windows WLAN Service: out-of-bounds read lets nearby attacker crash wireless","description":"Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.","summary":"A memory read past the end of a buffer in the Windows WLAN Service can be triggered by an unauthorized attacker on an adjacent wireless network. The result is a denial of service, meaning the wireless service can be made to fail.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","wifi","windows"],"not_affected_if":["no-wlan-adapter","wireless-disabled"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:22:07+00:00","first_seen_at":"2026-11-10T19:25:30+00:00","triaged_at":"2026-11-10T19:56:08+00:00","updated_at":"2026-11-10T19:56:08+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:56:08Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows WLAN Service: out-of-bounds read lets nearby attacker crash wireless","impact":"low","summary":"A memory read past the end of a buffer in the Windows WLAN Service can be triggered by an unauthorized attacker on an adjacent wireless network. The result is a denial of service, meaning the wireless service can be made to fail.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["windows","wifi"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"wireless service crashes, denying network connectivity on the machine","analyst_note":"Confirm affected Windows builds and the Microsoft patch release from the NVD entry or the Microsoft Security Update Guide for CVE-2026-96086.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["wireless-disabled","no-wlan-adapter"],"who_is_affected":"Windows machines with the WLAN Service running and a wireless adapter in use are the systems exposed to nearby wireless traffic. The sources do not name affected Windows builds or say whether the fix is shipped yet. Machines with wireless disabled, or without a WLAN adapter, are unlikely to be affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000697,"input_tokens":4499,"output_tokens":494,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-96086':16A,19A 'adjac':46B,83C 'allow':74C 'attack':11A,43B,77C 'bound':7A,68C 'buffer':31B 'crash':12A 'cve':14A,17A 'deni':79C 'denial':53B 'end':28B 'fail':64B 'infrastructur':20B 'let':9A 'made':62B 'mean':56B 'memori':24B 'nearbi':10A 'network':48B,84C 'out-of-bound':4A,65C 'past':26B 'read':8A,25B,69C 'result':50B 'servic':3A,36B,55B,59B,73C,80C 'trigger':39B 'unauthor':42B,76C 'wifi':21B 'window':1A,22B,34B,71C 'wireless':13A,47B,58B 'wlan':2A,35B,72C","nicknames":[],"mitigations":[],"who_affected":"Windows machines with the WLAN Service running and a wireless adapter in use are the systems exposed to nearby wireless traffic. The sources do not name affected Windows builds or say whether the fix is shipped yet. Machines with wireless disabled, or without a WLAN adapter, are unlikely to be affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","wifi","windows"],"campaign_type":null,"search_a":"'-2026':15A,18A '-96086':16A,19A 'attack':11A 'bound':7A 'crash':12A 'cve':14A,17A 'let':9A 'nearbi':10A 'out-of-bound':4A 'read':8A 'servic':3A 'window':1A 'wireless':13A 'wlan':2A","search_b":"'adjac':46B 'attack':43B 'buffer':31B 'denial':53B 'end':28B 'fail':64B 'infrastructur':20B 'made':62B 'mean':56B 'memori':24B 'network':48B 'past':26B 'read':25B 'result':50B 'servic':36B,55B,59B 'trigger':39B 'unauthor':42B 'wifi':21B 'window':22B,34B 'wireless':47B,58B 'wlan':35B","search_c":"'adjac':83C 'allow':74C 'attack':77C 'bound':68C 'deni':79C 'network':84C 'out-of-bound':65C 'read':69C 'servic':73C,80C 'unauthor':76C 'window':71C 'wlan':72C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:22:07+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96086","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96086","severity":null,"published_at":"2026-11-10T19:22:07+00:00","modified_at":"2026-11-10T19:22:07+00:00","first_seen_at":"2026-11-10T19:25:30+00:00","fetched_at":"2026-11-10T19:25:30+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}