---
id: "CVE-2026-105513"
page: "https://infrastack.ai/live/CVE-2026-105513"
kind: "vulnerability"
aliases: ["CVE-2026-105513"]
title: "Windows Kernel: memory object handling lets a local user gain elevated privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "kernel", "windows"]
not_affected_if: ["fully-patched"]
published_at: "2026-11-10T19:17:50+00:00"
first_seen_at: "2026-11-10T19:24:17+00:00"
updated_at: "2026-11-10T19:54:14+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105513", "first_seen_at": "2026-11-10T19:24:17+00:00"}]
exploit_sources: []
---

# Windows Kernel: memory object handling lets a local user gain elevated privileges

Link for people: https://infrastack.ai/live/CVE-2026-105513 (this .md is for agents)

The Windows kernel mishandles objects in memory, so a flaw lets code run with elevated permissions. A locally authenticated attacker who runs a specially crafted application can gain higher privileges on the machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Windows build with `winver` and compare it to the Microsoft update that lists this CVE
- Confirm Windows Update has applied the latest cumulative update for your release

## Timeline

- 2026-11-10T19:24:17+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105513

## From the sources

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_