{"id":"CVE-2026-105492","kind":"vulnerability","aliases":["CVE-2026-105492"],"related":[],"title":"Windows Remote Registry Service: out-of-bounds read lets an authorized user crash it","description":"Out-of-bounds read in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.","summary":"Microsoft's Remote Registry Service has an out-of-bounds memory read that an authorized attacker can trigger over the network to deny service. The sources give no sign of code execution or data theft.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","remote-registry","windows"],"not_affected_if":["service-disabled"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:17:46+00:00","first_seen_at":"2026-11-10T19:24:14+00:00","triaged_at":"2026-11-10T20:02:38+00:00","updated_at":"2026-11-10T20:02:38+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:02:38Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Remote Registry Service: out-of-bounds read lets an authorized user crash it","impact":"low","summary":"Microsoft's Remote Registry Service has an out-of-bounds memory read that an authorized attacker can trigger over the network to deny service. The sources give no sign of code execution or data theft.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","remote-registry"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"service crashes and remote registry access is denied","analyst_note":"Check the Microsoft Security Response Center advisory for CVE-2026-105492 for affected Windows builds, default state of Remote Registry, and the patch.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["service-disabled"],"who_is_affected":"Systems running the Microsoft Remote Registry Service are exposed, and the attacker needs valid credentials for the service. The sources do not say which Windows versions are affected or whether the service is on by default. Teams that do not run Remote Registry can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000673,"input_tokens":4495,"output_tokens":447,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-105492':17A,20A '-2026':16A,19A 'allow':72C 'attack':42B,75C 'author':12A,41B,74C 'bound':8A,36B,65C 'code':57B 'crash':14A 'cve':15A,18A 'data':60B 'deni':49B,77C 'execut':58B 'give':53B 'infrastructur':21B 'let':10A 'memori':37B 'microsoft':26B,68C 'network':47B,81C 'out-of-bound':5A,33B,62C 'read':9A,38B,66C 'registri':3A,24B,29B,70C 'remot':2A,23B,28B,69C 'remote-registri':22B 'servic':4A,30B,50B,71C,78C 'sign':55B 'sourc':52B 'theft':61B 'trigger':44B 'user':13A 'window':1A,25B","nicknames":[],"mitigations":[],"who_affected":"Systems running the Microsoft Remote Registry Service are exposed, and the attacker needs valid credentials for the service. The sources do not say which Windows versions are affected or whether the service is on by default. Teams that do not run Remote Registry can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","remoteregistry","windows"],"campaign_type":null,"search_a":"'-105492':17A,20A '-2026':16A,19A 'author':12A 'bound':8A 'crash':14A 'cve':15A,18A 'let':10A 'out-of-bound':5A 'read':9A 'registri':3A 'remot':2A 'servic':4A 'user':13A 'window':1A","search_b":"'attack':42B 'author':41B 'bound':36B 'code':57B 'data':60B 'deni':49B 'execut':58B 'give':53B 'infrastructur':21B 'memori':37B 'microsoft':26B 'network':47B 'out-of-bound':33B 'read':38B 'registri':24B,29B 'remot':23B,28B 'remote-registri':22B 'servic':30B,50B 'sign':55B 'sourc':52B 'theft':61B 'trigger':44B 'window':25B","search_c":"'allow':72C 'attack':75C 'author':74C 'bound':65C 'deni':77C 'microsoft':68C 'network':81C 'out-of-bound':62C 'read':66C 'registri':70C 'remot':69C 'servic':71C,78C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:17:46+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105492","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105492","severity":null,"published_at":"2026-11-10T19:17:46+00:00","modified_at":"2026-11-10T19:17:46+00:00","first_seen_at":"2026-11-10T19:24:14+00:00","fetched_at":"2026-11-10T19:24:14+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}