What is CVE-2026-68896?

CVE-2026-68896 is a high-severity vulnerability in Microsoft Windows 11 Version 23h2, classified under Absolute Path Traversal. CVSS score: 7.8/10. Published 2026-09-08.

How severe is CVE-2026-68896?

High severity. CVSS v3 base score is 7.8 out of 10.

Path Traversal in Microsoft Windows 11 Version 23h2

CVE-2026-68896

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Microsoft Windows 11 Version 23h2
Microsoft Windows 11 Version 24h2
Microsoft Windows 11 Version 25h2
Microsoft Windows 11 Version 26h1
Microsoft Windows Server 2022
Microsoft Windows Server 2025
Microsoft Windows Server 2025 (Server Core Installation)

Weakness classification (CWE)

CWE-36 — Absolute Path Traversal

References

Microsoft Windows Search Component Elevation of Privilege Vulnerability (vendor-advisory, patch)

Frequently asked questions

What is CVE-2026-68896?: CVE-2026-68896 is a high-severity vulnerability in Microsoft Windows 11 Version 23h2, classified under Absolute Path Traversal. CVSS score: 7.8/10. Published 2026-09-08.
How severe is CVE-2026-68896?: High severity. CVSS v3 base score is 7.8 out of 10.