--- id: "CVE-2026-105547" page: "https://infrastack.ai/live/CVE-2026-105547" kind: "vulnerability" aliases: ["CVE-2026-105547"] title: "Windows Setup and Deployment: double free lets a local user gain privileges" severity: "high" cvss: 7.0 epss: null exploited: false status: "open" category: "infrastructure" products: [{"name": "Windows 10 Version 1809 / Windows Server 2019", "fixed": ["10.0.17763.9487"], "affected": ">= 10.0.17763.0, < 10.0.17763.9487", "ecosystem": "vendor"}, {"name": "Windows 10 Version 21H2", "fixed": ["10.0.19044.7846"], "affected": ">= 10.0.19044.0, < 10.0.19044.7846", "ecosystem": "vendor"}, {"name": "Windows 10 Version 22H2", "fixed": ["10.0.19045.7846"], "affected": ">= 10.0.19045.0, < 10.0.19045.7846", "ecosystem": "vendor"}, {"name": "Windows Server 2022", "fixed": ["10.0.20348.5870"], "affected": ">= 10.0.20348.0, < 10.0.20348.5870", "ecosystem": "vendor"}, {"name": "Windows 11 Version 23H2", "fixed": ["10.0.22631.7711"], "affected": ">= 10.0.22631.0, < 10.0.22631.7711", "ecosystem": "vendor"}, {"name": "Windows 11 Version 24H2", "fixed": ["10.0.26100.9974"], "affected": ">= 10.0.26100.0, < 10.0.26100.9974", "ecosystem": "vendor"}, {"name": "Windows Server 2025", "fixed": ["10.0.26100.33822"], "affected": ">= 10.0.26100.0, < 10.0.26100.33822", "ecosystem": "vendor"}, {"name": "Windows 11 Version 25H2", "fixed": ["10.0.26200.9974"], "affected": ">= 10.0.26200.0, < 10.0.26200.9974", "ecosystem": "vendor"}, {"name": "Windows 11 Version 26H1", "fixed": ["10.0.28000.3501"], "affected": ">= 10.0.28000.0, < 10.0.28000.3501", "ecosystem": "vendor"}, {"name": "Windows 11 Version 26H2", "fixed": ["10.0.26300.9974"], "affected": ">= 10.0.26300.0, < 10.0.26300.9974", "ecosystem": "vendor"}] ecosystems: ["vendor"] tags: ["infrastructure", "local-privilege-escalation", "title-review", "windows", "windows-10", "windows-11", "windows-server"] not_affected_if: ["patched-november-2026"] published_at: "2026-11-10T19:17:56+00:00" first_seen_at: "2026-11-10T19:24:19+00:00" updated_at: "2026-11-11T00:57:24+00:00" sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105547", "first_seen_at": "2026-11-10T19:24:19+00:00"}, {"source": "analyst", "url": "https://cveawg.mitre.org/api/cve/CVE-2026-105547", "first_seen_at": "2026-11-11T00:57:24+00:00", "cites": ["https://cveawg.mitre.org/api/cve/CVE-2026-105547", "https://www.zerodayinitiative.com/blog/2026/11/10/the-november-2026-security-update-review"]}] exploit_sources: [] --- # Windows Setup and Deployment: double free lets a local user gain privileges Link for people: https://infrastack.ai/live/CVE-2026-105547 (this .md is for agents) A double free bug in Windows Setup and Deployment lets an attacker who already has authorized local access raise their privileges. The sources give no further detail on the trigger or the affected Windows builds. _Summary, check and fix written by a model from the sources; labelled as such._ ## Affected - vendor:Windows 10 Version 1809 / Windows Server 2019 affected >= 10.0.17763.0, < 10.0.17763.9487 fixed 10.0.17763.9487 - vendor:Windows 10 Version 21H2 affected >= 10.0.19044.0, < 10.0.19044.7846 fixed 10.0.19044.7846 - vendor:Windows 10 Version 22H2 affected >= 10.0.19045.0, < 10.0.19045.7846 fixed 10.0.19045.7846 - vendor:Windows Server 2022 affected >= 10.0.20348.0, < 10.0.20348.5870 fixed 10.0.20348.5870 - vendor:Windows 11 Version 23H2 affected >= 10.0.22631.0, < 10.0.22631.7711 fixed 10.0.22631.7711 - vendor:Windows 11 Version 24H2 affected >= 10.0.26100.0, < 10.0.26100.9974 fixed 10.0.26100.9974 - vendor:Windows Server 2025 affected >= 10.0.26100.0, < 10.0.26100.33822 fixed 10.0.26100.33822 - vendor:Windows 11 Version 25H2 affected >= 10.0.26200.0, < 10.0.26200.9974 fixed 10.0.26200.9974 - vendor:Windows 11 Version 26H1 affected >= 10.0.28000.0, < 10.0.28000.3501 fixed 10.0.28000.3501 - vendor:Windows 11 Version 26H2 affected >= 10.0.26300.0, < 10.0.26300.9974 fixed 10.0.26300.9974 ## How to check Run winver or [System.Environment]::OSVersion.Version (PowerShell) and compare the full build.revision with the fixed build for your Windows version; lower means exposed. Only local, low-privileged authenticated access is needed (AV:L, AC:H). ## Fix Install the November 2026 (10 Nov) Windows cumulative update so the build is at or above the fixed one: Win10 1809/Server 2019 10.0.17763.9487; Win10 21H2 10.0.19044.7846; Win10 22H2 10.0.19045.7846; Server 2022 10.0.20348.5870; Win11 23H2 10.0.22631.7711; Win11 24H2 10.0.26100.9974; Server 2025 10.0.26100.33822; Win11 25H2 10.0.26200.9974; Win11 26H1 10.0.28000.3501; Win11 26H2 10.0.26300.9974. KB numbers not read (MSRC page is JavaScript-only). ## Timeline - 2026-11-10T19:24:19+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105547 - 2026-11-11T00:57:24+00:00 analyst https://cveawg.mitre.org/api/cve/CVE-2026-105547 — Affected/fixed builds from Microsoft's own CNA CVE record (cveawg); MSRC update-guide page is JS-only and not read, so KB numbers unknown. ZDI: not public, not exploited, Important 7.0. CISA SSVC exploitation none. Verified fix/products only against the CNA record. ## Documents - [advisory] CVE record published by Microsoft (CNA) for CVE-2026-105547 https://cveawg.mitre.org/api/cve/CVE-2026-105547 - [mentions] ZDI: The November 2026 Security Update Review https://www.zerodayinitiative.com/blog/2026/11/10/the-november-2026-security-update-review ## From the sources Double free in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. --- _Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_