---
id: "CVE-2026-103571"
page: "https://infrastack.ai/live/CVE-2026-103571"
kind: "vulnerability"
aliases: ["CVE-2026-103571"]
title: "Windows: CNG Key Isolation service memory bug lets local attackers gain elevated privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:17:41+00:00"
first_seen_at: "2026-11-10T19:24:13+00:00"
updated_at: "2026-11-10T19:54:20+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103571", "first_seen_at": "2026-11-10T19:24:13+00:00"}]
exploit_sources: []
---

# Windows: CNG Key Isolation service memory bug lets local attackers gain elevated privileges

Link for people: https://infrastack.ai/live/CVE-2026-103571 (this .md is for agents)

Windows' Cryptography Next Generation (CNG) Key Isolation service mishandles memory, which allows an attacker to elevate privileges. An attacker must first run code on the machine and then launch a specially crafted application to run processes in an elevated context.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-103571

## From the sources

An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting how the Windows CNG Key Isolation Service handles memory.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_