{"id":"CVE-2026-105552","kind":"vulnerability","aliases":["CVE-2026-105552"],"related":[],"title":"Windows kernel: uninitialized memory lets a local app leak data","description":"An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.\nTo exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.\nThe update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory.","summary":"The Windows kernel initializes some objects in memory incorrectly. An authenticated attacker running a crafted application can read information from kernel memory, which they could use to further compromise the machine.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kernel","windows"],"not_affected_if":["no-local-untrusted-code"],"how_to_check":"- Check the installed Windows build with `winver` and compare it against the Microsoft security update that lists this CVE.\n- Confirm Windows Update is set to install security updates.","fix":null,"status":"open","published_at":"2026-11-10T19:17:57+00:00","first_seen_at":"2026-11-10T19:24:19+00:00","triaged_at":"2026-11-10T20:02:18+00:00","updated_at":"2026-11-10T20:02:18+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:02:18Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows kernel: uninitialized memory lets a local app leak data","impact":"low","summary":"The Windows kernel initializes some objects in memory incorrectly. An authenticated attacker running a crafted application can read information from kernel memory, which they could use to further compromise the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","kernel"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local app reads kernel memory, aiding further system compromise","analyst_note":"Find the Microsoft Security Update Guide entry for CVE-2026-105552 to confirm affected Windows builds and the patch.","how_to_check":"- Check the installed Windows build with `winver` and compare it against the Microsoft security update that lists this CVE.\n- Confirm Windows Update is set to install security updates.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-untrusted-code"],"who_is_affected":"Windows machines where a user can run their own application. The sources do not name specific Windows versions. Systems that only run services without local user code are less exposed, but the sources do not say that explicitly.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000689,"input_tokens":4577,"output_tokens":462,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-105552':13A,16A '-2026':12A,15A 'address':97C 'app':8A 'applic':35B,77C 'attack':31B,71C,79C 'authent':30B,70C 'compromis':48B,90C 'correct':101C 'could':44B,72C,85C 'craft':34B,76C 'cve':11A,14A 'data':10A 'disclosur':53C 'exist':55C 'exploit':66C,82C 'improp':60C 'incorrect':28B 'inform':38B,52C,87C 'infrastructur':17B 'initi':23B,61C,106C 'kernel':2A,18B,22B,40B,59C,105C 'leak':9A 'let':5A 'local':7A 'machin':50B 'memori':4A,27B,41B,64C,109C 'object':25B,62C,107C 'obtain':86C 'read':37B 'run':32B,73C 'special':75C 'success':81C 'system':94C 'uniniti':3A 'updat':96C 'use':45B 'user':92C 'vulner':54C,68C,84C,99C 'window':1A,19B,21B,58C,104C","nicknames":[],"mitigations":[],"who_affected":"Windows machines where a user can run their own application. The sources do not name specific Windows versions. Systems that only run services without local user code are less exposed, but the sources do not say that explicitly.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","kernel","medium","windows"],"campaign_type":null,"search_a":"'-105552':13A,16A '-2026':12A,15A 'app':8A 'cve':11A,14A 'data':10A 'kernel':2A 'leak':9A 'let':5A 'local':7A 'memori':4A 'uniniti':3A 'window':1A","search_b":"'applic':35B 'attack':31B 'authent':30B 'compromis':48B 'could':44B 'craft':34B 'incorrect':28B 'inform':38B 'infrastructur':17B 'initi':23B 'kernel':18B,22B,40B 'machin':50B 'memori':27B,41B 'object':25B 'read':37B 'run':32B 'use':45B 'window':19B,21B","search_c":"'address':97C 'applic':77C 'attack':71C,79C 'authent':70C 'compromis':90C 'correct':101C 'could':72C,85C 'craft':76C 'disclosur':53C 'exist':55C 'exploit':66C,82C 'improp':60C 'inform':52C,87C 'initi':61C,106C 'kernel':59C,105C 'memori':64C,109C 'object':62C,107C 'obtain':86C 'run':73C 'special':75C 'success':81C 'system':94C 'updat':96C 'user':92C 'vulner':54C,68C,84C,99C 'window':58C,104C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:17:57+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105552","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105552","severity":null,"published_at":"2026-11-10T19:17:57+00:00","modified_at":"2026-11-10T19:17:57+00:00","first_seen_at":"2026-11-10T19:24:19+00:00","fetched_at":"2026-11-10T19:24:19+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}