---
id: "CVE-2026-105504"
page: "https://infrastack.ai/live/CVE-2026-105504"
kind: "vulnerability"
aliases: ["CVE-2026-105504"]
title: "Windows Kernel: memory object handling lets a local user gain elevated privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["endpoints", "infrastructure", "windows", "windows-kernel"]
not_affected_if: ["no-local-logins"]
published_at: "2026-11-10T19:17:48+00:00"
first_seen_at: "2026-11-10T19:24:15+00:00"
updated_at: "2026-11-10T19:54:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105504", "first_seen_at": "2026-11-10T19:24:15+00:00"}]
exploit_sources: []
---

# Windows Kernel: memory object handling lets a local user gain elevated privileges

Link for people: https://infrastack.ai/live/CVE-2026-105504 (this .md is for agents)

The Windows kernel mishandles objects in memory, so a locally logged-in attacker running a crafted application can execute code with elevated permissions. The sources state the security update fixes it by making the kernel handle those objects correctly.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Windows build and update history under Settings > Windows Update > Update history, looking for the update that addresses this CVE.
- The sources do not name the affected Windows builds or the KB number: unknown.

## Timeline

- 2026-11-10T19:24:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105504

## From the sources

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_