{"id":"CVE-2026-105505","kind":"vulnerability","aliases":["CVE-2026-105505"],"related":[],"title":"Microsoft IME: path traversal lets a local user gain higher privileges","description":"Relative path traversal in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.","summary":"Microsoft Input Method Editor has a relative path traversal flaw that lets an authorized local attacker escalate privileges. An attacker who already has a local account can gain higher rights on the machine.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","microsoft-ime","windows"],"not_affected_if":["no-local-accounts"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:17:48+00:00","first_seen_at":"2026-11-10T19:24:15+00:00","triaged_at":"2026-11-10T19:42:39+00:00","updated_at":"2026-11-10T19:42:39+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:42:39Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Microsoft IME: path traversal lets a local user gain higher privileges","impact":"high","summary":"Microsoft Input Method Editor has a relative path traversal flaw that lets an authorized local attacker escalate privileges. An attacker who already has a local account can gain higher rights on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","microsoft-ime"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the machine","analyst_note":"Check Microsoft's Security Update Guide entry for CVE-2026-105505 for affected IME versions, patch and any workaround.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-accounts"],"who_is_affected":"Affects Microsoft Input Method Editor as installed on Windows systems, according to the NVD entry. Exposure requires an attacker who already holds an authorized local account. The sources do not list affected versions or a patch.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000663,"input_tokens":4499,"output_tokens":427,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check Microsoft's Security Update Guide entry for CVE-2026-105505 for affected IME versions, patch and any workaround.","search":"'-105505':14A,17A '-2026':13A,16A 'account':48B 'allow':65C 'alreadi':44B 'attack':38B,42B,68C 'author':36B,67C 'cve':12A,15A 'editor':26B,63C 'elev':70C 'escal':39B 'flaw':32B 'gain':9A,50B 'higher':10A,51B 'ime':2A,21B,64C 'infrastructur':18B 'input':24B,61C 'let':5A,34B 'local':7A,37B,47B,72C 'machin':55B 'method':25B,62C 'microsoft':1A,20B,23B,60C 'microsoft-im':19B 'path':3A,30B,57C 'privileg':11A,40B,71C 'relat':29B,56C 'right':52B 'travers':4A,31B,58C 'user':8A 'window':22B","nicknames":[],"mitigations":[],"who_affected":"Affects Microsoft Input Method Editor as installed on Windows systems, according to the NVD entry. Exposure requires an attacker who already holds an authorized local account. The sources do not list affected versions or a patch.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","microsoftime","windows"],"campaign_type":null,"search_a":"'-105505':14A,17A '-2026':13A,16A 'cve':12A,15A 'gain':9A 'higher':10A 'ime':2A 'let':5A 'local':7A 'microsoft':1A 'path':3A 'privileg':11A 'travers':4A 'user':8A","search_b":"'account':48B 'alreadi':44B 'attack':38B,42B 'author':36B 'editor':26B 'escal':39B 'flaw':32B 'gain':50B 'higher':51B 'ime':21B 'infrastructur':18B 'input':24B 'let':34B 'local':37B,47B 'machin':55B 'method':25B 'microsoft':20B,23B 'microsoft-im':19B 'path':30B 'privileg':40B 'relat':29B 'right':52B 'travers':31B 'window':22B","search_c":"'allow':65C 'attack':68C 'author':67C 'editor':63C 'elev':70C 'ime':64C 'input':61C 'local':72C 'method':62C 'microsoft':60C 'path':57C 'privileg':71C 'relat':56C 'travers':58C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:17:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105505","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105505","severity":null,"published_at":"2026-11-10T19:17:48+00:00","modified_at":"2026-11-10T19:17:49+00:00","first_seen_at":"2026-11-10T19:24:15+00:00","fetched_at":"2026-11-10T19:24:15+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}