Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability

Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely CVE-2026-96016 · score 7.8/10

What could go wrong?

Someone who already has a normal account could give themselves full admin rights.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H2 for ARM64-based Systems, Windows 11 Version 26H2 for x64-based Systems and 4 more versions

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: KB5131090, KB5132061, KB5132043, KB5131080, KB5131077, KB5132059. Official page.