---
id: "CVE-2026-105552"
page: "https://infrastack.ai/live/CVE-2026-105552"
kind: "vulnerability"
aliases: ["CVE-2026-105552"]
title: "Windows kernel: uninitialized memory lets a local app leak data"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "kernel", "windows"]
not_affected_if: ["no-local-untrusted-code"]
published_at: "2026-11-10T19:17:57+00:00"
first_seen_at: "2026-11-10T19:24:19+00:00"
updated_at: "2026-11-10T20:02:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105552", "first_seen_at": "2026-11-10T19:24:19+00:00"}]
exploit_sources: []
---

# Windows kernel: uninitialized memory lets a local app leak data

Link for people: https://infrastack.ai/live/CVE-2026-105552 (this .md is for agents)

The Windows kernel initializes some objects in memory incorrectly. An authenticated attacker running a crafted application can read information from kernel memory, which they could use to further compromise the machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Windows build with `winver` and compare it against the Microsoft security update that lists this CVE.
- Confirm Windows Update is set to install security updates.

## Timeline

- 2026-11-10T19:24:19+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105552

## From the sources

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.
To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
The update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_