---
id: "CVE-2026-105017"
page: "https://infrastack.ai/live/CVE-2026-105017"
kind: "vulnerability"
aliases: ["CVE-2026-105017"]
title: "Windows Volume Shadow Copy race condition lets a local user gain privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "volume-shadow-copy", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:17:41+00:00"
first_seen_at: "2026-11-10T19:24:13+00:00"
updated_at: "2026-11-10T19:54:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105017", "first_seen_at": "2026-11-10T19:24:13+00:00"}]
exploit_sources: []
---

# Windows Volume Shadow Copy race condition lets a local user gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-105017 (this .md is for agents)

A race condition in the Windows Volume Shadow Copy service lets an authorized local attacker elevate their privileges. The sources do not say which Windows versions are affected or how the flaw is triggered.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105017

## From the sources

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Volume Shadow Copy allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_