{"id":"CVE-2026-105513","kind":"vulnerability","aliases":["CVE-2026-105513"],"related":[],"title":"Windows Kernel: memory object handling lets a local user gain elevated privileges","description":"An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.\nTo exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.\nThe security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.","summary":"The Windows kernel mishandles objects in memory, so a flaw lets code run with elevated permissions. A locally authenticated attacker who runs a specially crafted application can gain higher privileges on the machine.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kernel","windows"],"not_affected_if":["fully-patched"],"how_to_check":"- Check the installed Windows build with `winver` and compare it to the Microsoft update that lists this CVE\n- Confirm Windows Update has applied the latest cumulative update for your release","fix":null,"status":"open","published_at":"2026-11-10T19:17:50+00:00","first_seen_at":"2026-11-10T19:24:17+00:00","triaged_at":"2026-11-10T19:54:14+00:00","updated_at":"2026-11-10T19:54:14+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:54:14Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Kernel: memory object handling lets a local user gain elevated privileges","impact":"high","summary":"The Windows kernel mishandles objects in memory, so a flaw lets code run with elevated permissions. A locally authenticated attacker who runs a specially crafted application can gain higher privileges on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","kernel"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local code runs with kernel-level elevated privileges","analyst_note":"Sources give no affected Windows versions or fixed build; check the Microsoft Security Update Guide entry for CVE-2026-105513 and the list of supported builds.","how_to_check":"- Check the installed Windows build with `winver` and compare it to the Microsoft update that lists this CVE\n- Confirm Windows Update has applied the latest cumulative update for your release","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["fully-patched"],"who_is_affected":"Machines running affected Windows versions where a local user or process can run code. Remote attackers without a local foothold are not described as able to trigger it. Systems that are fully patched, or that only run trusted software with no local user access, face less risk. unknown beyond that.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000712,"input_tokens":4581,"output_tokens":507,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Sources give no affected Windows versions or fixed build; check the Microsoft Security Update Guide entry for CVE-2026-105513 and the list of supported builds.","search":"'-105513':15A,18A '-2026':14A,17A 'address':102C 'applic':47B,98C 'attack':41B,73C,92C 'authent':40B,91C 'code':33B,81C 'could':79C,93C 'craft':46B,97C 'cve':13A,16A 'elev':11A,36B,56C,83C 'ensur':106C 'execut':80C 'exist':60C 'exploit':76C,86C 'flaw':31B 'gain':10A,49B 'handl':5A,68C,111C 'higher':50B 'infrastructur':19B 'kernel':2A,20B,24B,67C,109C 'let':6A,32B 'local':8A,39B,90C 'machin':54B 'memori':3A,28B,71C,114C 'mishandl':25B 'object':4A,26B,69C,112C 'permiss':37B,84C 'privileg':12A,51B,58C 'proper':110C 'run':34B,43B,94C 'secur':100C 'special':45B,96C 'success':75C 'updat':101C 'user':9A 'vulner':59C,78C,88C,104C 'way':63C 'window':1A,21B,23B,66C,108C","nicknames":[],"mitigations":[],"who_affected":"Machines running affected Windows versions where a local user or process can run code. Remote attackers without a local foothold are not described as able to trigger it. Systems that are fully patched, or that only run trusted software with no local user access, face less risk. unknown beyond that.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","kernel","windows"],"campaign_type":null,"search_a":"'-105513':15A,18A '-2026':14A,17A 'cve':13A,16A 'elev':11A 'gain':10A 'handl':5A 'kernel':2A 'let':6A 'local':8A 'memori':3A 'object':4A 'privileg':12A 'user':9A 'window':1A","search_b":"'applic':47B 'attack':41B 'authent':40B 'code':33B 'craft':46B 'elev':36B 'flaw':31B 'gain':49B 'higher':50B 'infrastructur':19B 'kernel':20B,24B 'let':32B 'local':39B 'machin':54B 'memori':28B 'mishandl':25B 'object':26B 'permiss':37B 'privileg':51B 'run':34B,43B 'special':45B 'window':21B,23B","search_c":"'address':102C 'applic':98C 'attack':73C,92C 'authent':91C 'code':81C 'could':79C,93C 'craft':97C 'elev':56C,83C 'ensur':106C 'execut':80C 'exist':60C 'exploit':76C,86C 'handl':68C,111C 'kernel':67C,109C 'local':90C 'memori':71C,114C 'object':69C,112C 'permiss':84C 'privileg':58C 'proper':110C 'run':94C 'secur':100C 'special':96C 'success':75C 'updat':101C 'vulner':59C,78C,88C,104C 'way':63C 'window':66C,108C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:17:50+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105513","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105513","severity":null,"published_at":"2026-11-10T19:17:50+00:00","modified_at":"2026-11-10T19:17:50+00:00","first_seen_at":"2026-11-10T19:24:17+00:00","fetched_at":"2026-11-10T19:24:17+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}