CVE-2026-96188: Microsoft Powertoys

High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days.

External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Microsoft Powertoys: from 0.1, before 0.101.2632.0 (fixed in 0.101.2632.0)

Published 2026-10-13. Last modified 2026-10-13.