---
id: "CVE-2026-105540"
page: "https://infrastack.ai/live/CVE-2026-105540"
kind: "vulnerability"
aliases: ["CVE-2026-105540"]
title: "Windows Error Reporting race condition lets a local user gain SYSTEM privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "local-privilege-escalation", "windows"]
not_affected_if: ["no-local-untrusted-users"]
published_at: "2026-11-10T19:17:55+00:00"
first_seen_at: "2026-11-10T19:24:18+00:00"
updated_at: "2026-11-11T01:00:12+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105540", "first_seen_at": "2026-11-10T19:24:18+00:00"}, {"source": "analyst", "url": "https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-105540", "first_seen_at": "2026-11-11T01:00:12+00:00", "cites": ["https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-105540"]}]
exploit_sources: []
---

# Windows Error Reporting race condition lets a local user gain SYSTEM privileges

Link for people: https://infrastack.ai/live/CVE-2026-105540 (this .md is for agents)

Microsoft rates this Important (CVSS 7.0). An authorized local attacker who wins a race condition in Windows Error Reporting can gain SYSTEM privileges. Microsoft says it is not exploited and not publicly disclosed, and rates exploitation less likely. Fixed in the November 2026 security updates; the affected builds and KB numbers were not readable from the MSRC page.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Check Windows Update history for the November 10, 2026 cumulative update for your Windows version. Look up the CVE in the MSRC Security Update Guide for the exact KB per build. Builds and KB are unknown here.

## Timeline

- 2026-11-10T19:24:18+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105540
- 2026-11-11T01:00:12+00:00 analyst https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-105540 — MSRC SUG JSON (Nov 2026 Patch Tuesday) read: Important, local EoP to SYSTEM, race condition (AC:H), not exploited, not publicly disclosed, Exploitation Less Likely, customer action required. Builds/KB list not reachable (MSRC page JS-only, browser/search credits out), so fix/builds left unknown and nothing verified.

## Documents

- [advisory] MSRC: Windows Error Reporting Elevation of Privilege Vulnerability (CVE-2026-105540) https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-105540

## From the sources

Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_