{"id":"CVE-2026-96093","kind":"vulnerability","aliases":["CVE-2026-96093"],"related":[],"title":"Windows WinINet: out-of-bounds read lets a local user leak data","description":"Out-of-bounds read in Windows Internet (wininet.dll) allows an authorized attacker to disclose information locally.","summary":"A bounds-checking flaw in the Windows Internet library (wininet.dll) lets an authorized local user read memory outside an intended buffer. An attacker can disclose information from the machine but the sources do not say it grants code execution.","severity":"medium","cvss":4.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows","wininet"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:22:07+00:00","first_seen_at":"2026-11-10T19:25:30+00:00","triaged_at":"2026-11-10T20:04:05+00:00","updated_at":"2026-11-10T20:04:05+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:04:05Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows WinINet: out-of-bounds read lets a local user leak data","impact":"low","summary":"A bounds-checking flaw in the Windows Internet library (wininet.dll) lets an authorized local user read memory outside an intended buffer. An attacker can disclose information from the machine but the sources do not say it grants code execution.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","wininet"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user reads sensitive memory contents from the machine","analyst_note":"Check the Microsoft security update guide entry for CVE-2026-96093 for affected Windows builds, the fixed update, and any mitigation.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Systems running Windows where wininet.dll is present, which is any Windows machine. Exposure requires an attacker who already has an authorized local account on the machine. The sources do not describe a specific configuration or product version range.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000668,"input_tokens":4497,"output_tokens":436,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-96093':16A,19A 'allow':72C 'attack':46B,75C 'author':36B,74C 'bound':6A,25B,66C 'bounds-check':24B 'buffer':44B 'check':26B 'code':61B 'cve':14A,17A 'data':13A 'disclos':48B,77C 'execut':62B 'flaw':27B 'grant':60B 'inform':49B,78C 'infrastructur':20B 'intend':43B 'internet':31B,70C 'leak':12A 'let':8A,34B 'librari':32B 'local':10A,37B,79C 'machin':52B 'memori':40B 'out-of-bound':3A,63C 'outsid':41B 'read':7A,39B,67C 'say':58B 'sourc':55B 'user':11A,38B 'window':1A,21B,30B,69C 'wininet':2A,22B 'wininet.dll':33B,71C","nicknames":[],"mitigations":[],"who_affected":"Systems running Windows where wininet.dll is present, which is any Windows machine. Exposure requires an attacker who already has an authorized local account on the machine. The sources do not describe a specific configuration or product version range.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","windows","wininet"],"campaign_type":null,"search_a":"'-2026':15A,18A '-96093':16A,19A 'bound':6A 'cve':14A,17A 'data':13A 'leak':12A 'let':8A 'local':10A 'out-of-bound':3A 'read':7A 'user':11A 'window':1A 'wininet':2A","search_b":"'attack':46B 'author':36B 'bound':25B 'bounds-check':24B 'buffer':44B 'check':26B 'code':61B 'disclos':48B 'execut':62B 'flaw':27B 'grant':60B 'inform':49B 'infrastructur':20B 'intend':43B 'internet':31B 'let':34B 'librari':32B 'local':37B 'machin':52B 'memori':40B 'outsid':41B 'read':39B 'say':58B 'sourc':55B 'user':38B 'window':21B,30B 'wininet':22B 'wininet.dll':33B","search_c":"'allow':72C 'attack':75C 'author':74C 'bound':66C 'disclos':77C 'inform':78C 'internet':70C 'local':79C 'out-of-bound':63C 'read':67C 'window':69C 'wininet.dll':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:22:07+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96093","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96093","severity":null,"published_at":"2026-11-10T19:22:07+00:00","modified_at":"2026-11-10T19:22:08+00:00","first_seen_at":"2026-11-10T19:25:30+00:00","fetched_at":"2026-11-10T19:25:30+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}