Windows User Manager Service
by Microsoft
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-96037 | Hig | 0.51 | 7.8 | — | Nov 10, 2026 | Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-95987 | Hig | 0.45 | 7.0 | — | Nov 10, 2026 | Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally. |
- risk 0.51cvss 7.8epss —
Heap-based buffer overflow in Windows User Manager Service allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in Windows User Manager Service allows an authorized attacker to elevate privileges locally.