{"id":"CVE-2026-105490","kind":"vulnerability","aliases":["CVE-2026-105490"],"related":[],"title":"Windows: stack buffer overflow lets a local user gain higher privileges","description":"Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.","summary":"A stack-based buffer overflow in the Windows Advanced Rasterization Platform lets an authorized local user elevate their privileges. The attacker needs a valid account on the machine first.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":["no-local-accounts"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:17:46+00:00","first_seen_at":"2026-11-10T19:24:14+00:00","triaged_at":"2026-11-10T19:34:15+00:00","updated_at":"2026-11-10T19:34:15+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T19:34:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows: stack buffer overflow lets a local user gain higher privileges","impact":"high","summary":"A stack-based buffer overflow in the Windows Advanced Rasterization Platform lets an authorized local user elevate their privileges. The attacker needs a valid account on the machine first.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains SYSTEM-level privileges on the machine","analyst_note":"Confirm affected Windows builds and the Microsoft security update that fixes CVE-2026-105490 from the MSRC advisory.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-accounts"],"who_is_affected":"Affects Windows machines where the Advanced Rasterization Platform component is present, which covers standard Windows installs. The sources do not say which Windows builds are affected or which update fixes it. Systems where no one holds a local account are not exposed to this path.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000665,"input_tokens":4502,"output_tokens":429,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Confirm affected Windows builds and the Microsoft security update that fixes CVE-2026-105490 from the MSRC advisory.","search":"'-105490':14A,17A '-2026':13A,16A 'account':45B 'advanc':29B,57C 'allow':60C 'attack':41B,63C 'author':34B,62C 'base':23B,52C 'buffer':3A,24B,53C 'cve':12A,15A 'elev':37B,65C 'first':49B 'gain':9A 'higher':10A 'infrastructur':18B 'let':5A,32B 'local':7A,35B,67C 'machin':48B 'need':42B 'overflow':4A,25B,54C 'platform':31B,59C 'privileg':11A,39B,66C 'raster':30B,58C 'stack':2A,22B,51C 'stack-bas':21B,50C 'user':8A,36B 'valid':44B 'window':1A,19B,28B,56C","nicknames":[],"mitigations":[],"who_affected":"Affects Windows machines where the Advanced Rasterization Platform component is present, which covers standard Windows installs. The sources do not say which Windows builds are affected or which update fixes it. Systems where no one holds a local account are not exposed to this path.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","windows"],"campaign_type":null,"search_a":"'-105490':14A,17A '-2026':13A,16A 'buffer':3A 'cve':12A,15A 'gain':9A 'higher':10A 'let':5A 'local':7A 'overflow':4A 'privileg':11A 'stack':2A 'user':8A 'window':1A","search_b":"'account':45B 'advanc':29B 'attack':41B 'author':34B 'base':23B 'buffer':24B 'elev':37B 'first':49B 'infrastructur':18B 'let':32B 'local':35B 'machin':48B 'need':42B 'overflow':25B 'platform':31B 'privileg':39B 'raster':30B 'stack':22B 'stack-bas':21B 'user':36B 'valid':44B 'window':19B,28B","search_c":"'advanc':57C 'allow':60C 'attack':63C 'author':62C 'base':52C 'buffer':53C 'elev':65C 'local':67C 'overflow':54C 'platform':59C 'privileg':66C 'raster':58C 'stack':51C 'stack-bas':50C 'window':56C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:17:46+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105490","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105490","severity":null,"published_at":"2026-11-10T19:17:46+00:00","modified_at":"2026-11-10T19:17:46+00:00","first_seen_at":"2026-11-10T19:24:14+00:00","fetched_at":"2026-11-10T19:24:14+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}