{"id":"CVE-2026-105540","kind":"vulnerability","aliases":["CVE-2026-105540"],"related":[],"title":"Windows Error Reporting flaw lets a local user gain higher privileges","description":"Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally.","summary":"Windows Error Reporting mishandles a resource transfer between security contexts, letting an authorized local user elevate privileges. An attacker who already has a login on the machine could gain higher rights, such as administrator or SYSTEM.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:17:55+00:00","first_seen_at":"2026-11-10T19:24:18+00:00","triaged_at":"2026-11-10T19:54:10+00:00","updated_at":"2026-11-10T19:54:10+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:54:10Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Error Reporting flaw lets a local user gain higher privileges","impact":"high","summary":"Windows Error Reporting mishandles a resource transfer between security contexts, letting an authorized local user elevate privileges. An attacker who already has a login on the machine could gain higher rights, such as administrator or SYSTEM.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains administrator or SYSTEM privileges on the machine","analyst_note":"Find the Microsoft advisory for CVE-2026-105540 to confirm affected Windows builds, the fixed update, and whether any setting is required.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Any Windows machine where a user already has a local account can be exposed to this flaw. The sources do not name the affected Windows builds or the patch that fixes it. The sources do not say whether the flaw needs a non-default setting.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000668,"input_tokens":4496,"output_tokens":436,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the Microsoft advisory for CVE-2026-105540 to confirm affected Windows builds, the fixed update, and whether any setting is required.","search":"'-105540':14A,17A '-2026':13A,16A 'administr':53B 'allow':65C 'alreadi':40B 'attack':38B,68C 'author':32B,67C 'context':29B 'could':47B 'cve':12A,15A 'elev':35B,70C 'error':2A,21B,63C 'flaw':4A 'gain':9A,48B 'higher':10A,49B 'incorrect':56C 'infrastructur':18B 'let':5A,30B 'local':7A,33B,72C 'login':43B 'machin':46B 'mishandl':23B 'privileg':11A,36B,71C 'report':3A,22B,64C 'resourc':25B,57C 'right':50B 'secur':28B 'sphere':60C 'system':55B 'transfer':26B,58C 'user':8A,34B 'window':1A,19B,20B,62C","nicknames":[],"mitigations":[],"who_affected":"Any Windows machine where a user already has a local account can be exposed to this flaw. The sources do not name the affected Windows builds or the patch that fixes it. The sources do not say whether the flaw needs a non-default setting.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","windows"],"campaign_type":null,"search_a":"'-105540':14A,17A '-2026':13A,16A 'cve':12A,15A 'error':2A 'flaw':4A 'gain':9A 'higher':10A 'let':5A 'local':7A 'privileg':11A 'report':3A 'user':8A 'window':1A","search_b":"'administr':53B 'alreadi':40B 'attack':38B 'author':32B 'context':29B 'could':47B 'elev':35B 'error':21B 'gain':48B 'higher':49B 'infrastructur':18B 'let':30B 'local':33B 'login':43B 'machin':46B 'mishandl':23B 'privileg':36B 'report':22B 'resourc':25B 'right':50B 'secur':28B 'system':55B 'transfer':26B 'user':34B 'window':19B,20B","search_c":"'allow':65C 'attack':68C 'author':67C 'elev':70C 'error':63C 'incorrect':56C 'local':72C 'privileg':71C 'report':64C 'resourc':57C 'sphere':60C 'transfer':58C 'window':62C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:17:55+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105540","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105540","severity":null,"published_at":"2026-11-10T19:17:55+00:00","modified_at":"2026-11-10T19:17:55+00:00","first_seen_at":"2026-11-10T19:24:18+00:00","fetched_at":"2026-11-10T19:24:18+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}