CVE-2026-88168
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows Bind Filter Driver
See all- CVE-2026-85812Medium
Files or directories accessible to external parties in the Windows Bind Filter Driver allows an authorized attacker to disclose information locally.
- CVE-2026-83900High
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83852High
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83692High
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70299High
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-70274High
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-68825High
A use-after-free vulnerability exists in Windows Bind Filter Driver. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62705High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-61934High
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-61927High
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

