{"id":"CVE-2026-105511","kind":"vulnerability","aliases":["CVE-2026-105511"],"related":[],"title":"Windows PPPoE: race condition lets a local user gain higher privileges","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet (PPPoE) allows an authorized attacker to elevate privileges locally.","summary":"A race condition in the Windows Point-to-Point Protocol over Ethernet (PPPoE) component lets an authorized local attacker elevate privileges. The sources give no detail beyond that description.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","pppoe","windows"],"not_affected_if":["no-pppoe-in-use"],"how_to_check":"- Check the Windows build and patch level with `winver` or `systeminfo` against the Microsoft security update guide entry for CVE-2026-105511\n- Confirm whether the Remote Access / PPPoE component is in use on the machine (unknown from the sources)","fix":null,"status":"open","published_at":"2026-11-10T19:17:50+00:00","first_seen_at":"2026-11-10T19:24:17+00:00","triaged_at":"2026-11-10T19:54:14+00:00","updated_at":"2026-11-10T19:54:14+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:54:14Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows PPPoE: race condition lets a local user gain higher privileges","impact":"high","summary":"A race condition in the Windows Point-to-Point Protocol over Ethernet (PPPoE) component lets an authorized local attacker elevate privileges. The sources give no detail beyond that description.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","pppoe"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated system privileges on the Windows machine","analyst_note":"Find the Microsoft advisory for CVE-2026-105511 to confirm affected Windows builds, the fixed update, and whether PPPoE must be enabled.","how_to_check":"- Check the Windows build and patch level with `winver` or `systeminfo` against the Microsoft security update guide entry for CVE-2026-105511\n- Confirm whether the Remote Access / PPPoE component is in use on the machine (unknown from the sources)","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-pppoe-in-use"],"who_is_affected":"Only a user who already has an authorized local account on a Windows machine can trigger this flaw, and it is the PPPoE component that is affected. The sources do not say whether PPPoE must be actively configured for exposure. Systems that do not use PPPoE are likely less exposed, but this is not confirmed by the sources.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000729,"input_tokens":4517,"output_tokens":554,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the Microsoft advisory for CVE-2026-105511 to confirm affected Windows builds, the fixed update, and whether PPPoE must be enabled.","search":"'-105511':14A,17A '-2026':13A,16A 'allow':71C 'attack':40B,74C 'author':38B,73C 'beyond':48B 'compon':35B 'concurr':51C 'condit':4A,23B,60C 'cve':12A,15A 'descript':50B 'detail':47B 'elev':41B,76C 'ethernet':33B,69C 'execut':52C 'gain':9A 'give':45B 'higher':10A 'improp':57C 'infrastructur':18B 'let':5A,36B 'local':7A,39B,78C 'point':28B,30B,64C,66C 'point-to-point':27B,63C 'pppoe':2A,19B,34B,70C 'privileg':11A,42B,77C 'protocol':31B,67C 'race':3A,22B,59C 'resourc':55C 'share':54C 'sourc':44B 'synchron':58C 'use':53C 'user':8A 'window':1A,20B,26B,62C","nicknames":[],"mitigations":[],"who_affected":"Only a user who already has an authorized local account on a Windows machine can trigger this flaw, and it is the PPPoE component that is affected. The sources do not say whether PPPoE must be actively configured for exposure. Systems that do not use PPPoE are likely less exposed, but this is not confirmed by the sources.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","pppoe","windows"],"campaign_type":null,"search_a":"'-105511':14A,17A '-2026':13A,16A 'condit':4A 'cve':12A,15A 'gain':9A 'higher':10A 'let':5A 'local':7A 'pppoe':2A 'privileg':11A 'race':3A 'user':8A 'window':1A","search_b":"'attack':40B 'author':38B 'beyond':48B 'compon':35B 'condit':23B 'descript':50B 'detail':47B 'elev':41B 'ethernet':33B 'give':45B 'infrastructur':18B 'let':36B 'local':39B 'point':28B,30B 'point-to-point':27B 'pppoe':19B,34B 'privileg':42B 'protocol':31B 'race':22B 'sourc':44B 'window':20B,26B","search_c":"'allow':71C 'attack':74C 'author':73C 'concurr':51C 'condit':60C 'elev':76C 'ethernet':69C 'execut':52C 'improp':57C 'local':78C 'point':64C,66C 'point-to-point':63C 'pppoe':70C 'privileg':77C 'protocol':67C 'race':59C 'resourc':55C 'share':54C 'synchron':58C 'use':53C 'window':62C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:17:50+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105511","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105511","severity":null,"published_at":"2026-11-10T19:17:50+00:00","modified_at":"2026-11-10T19:17:50+00:00","first_seen_at":"2026-11-10T19:24:17+00:00","fetched_at":"2026-11-10T19:24:17+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}