{"id":"CVE-2026-105553","kind":"vulnerability","aliases":["CVE-2026-105553"],"related":[],"title":"Windows Filtering Platform: stack overflow lets a local user gain higher privileges","description":"Stack-based buffer overflow in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.","summary":"A stack-based buffer overflow in Windows Filtering Platform (WFP), the Windows networking filter layer, lets an authorized local attacker elevate privileges. The sources give no further detail on the trigger or affected builds.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows","windows-filtering-platform"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:17:57+00:00","first_seen_at":"2026-11-10T19:24:19+00:00","triaged_at":"2026-11-10T19:54:04+00:00","updated_at":"2026-11-10T19:54:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T19:54:04Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Filtering Platform: stack overflow lets a local user gain higher privileges","impact":"high","summary":"A stack-based buffer overflow in Windows Filtering Platform (WFP), the Windows networking filter layer, lets an authorized local attacker elevate privileges. The sources give no further detail on the trigger or affected builds.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","windows-filtering-platform"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains SYSTEM-level privileges on the machine","analyst_note":"Check Microsoft's security update guide for CVE-2026-105553 for affected Windows builds, the patch, and any detection guidance.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Windows machines where a user already has a local account can be affected, since the flaw is local privilege escalation. The sources do not list affected Windows builds or whether the issue is patched, so unknown. Machines with no untrusted local users carry lower practical risk.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000677,"input_tokens":4505,"output_tokens":452,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check Microsoft's security update guide for CVE-2026-105553 for affected Windows builds, the patch, and any detection guidance.","search":"'-105553':15A,18A '-2026':14A,17A 'affect':58B 'allow':70C 'attack':45B,73C 'author':43B,72C 'base':28B,62C 'buffer':29B,63C 'build':59B 'cve':13A,16A 'detail':53B 'elev':46B,75C 'filter':2A,23B,33B,39B,67C 'gain':10A 'give':50B 'higher':11A 'infrastructur':19B 'layer':40B 'let':6A,41B 'local':8A,44B,77C 'network':38B 'overflow':5A,30B,64C 'platform':3A,24B,34B,68C 'privileg':12A,47B,76C 'sourc':49B 'stack':4A,27B,61C 'stack-bas':26B,60C 'trigger':56B 'user':9A 'wfp':35B,69C 'window':1A,20B,22B,32B,37B,66C 'windows-filtering-platform':21B","nicknames":[],"mitigations":[],"who_affected":"Windows machines where a user already has a local account can be affected, since the flaw is local privilege escalation. The sources do not list affected Windows builds or whether the issue is patched, so unknown. Machines with no untrusted local users carry lower practical risk.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","windows","windowsfilteringplatform"],"campaign_type":null,"search_a":"'-105553':15A,18A '-2026':14A,17A 'cve':13A,16A 'filter':2A 'gain':10A 'higher':11A 'let':6A 'local':8A 'overflow':5A 'platform':3A 'privileg':12A 'stack':4A 'user':9A 'window':1A","search_b":"'affect':58B 'attack':45B 'author':43B 'base':28B 'buffer':29B 'build':59B 'detail':53B 'elev':46B 'filter':23B,33B,39B 'give':50B 'infrastructur':19B 'layer':40B 'let':41B 'local':44B 'network':38B 'overflow':30B 'platform':24B,34B 'privileg':47B 'sourc':49B 'stack':27B 'stack-bas':26B 'trigger':56B 'wfp':35B 'window':20B,22B,32B,37B 'windows-filtering-platform':21B","search_c":"'allow':70C 'attack':73C 'author':72C 'base':62C 'buffer':63C 'elev':75C 'filter':67C 'local':77C 'overflow':64C 'platform':68C 'privileg':76C 'stack':61C 'stack-bas':60C 'wfp':69C 'window':66C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:17:57+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105553","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105553","severity":null,"published_at":"2026-11-10T19:17:57+00:00","modified_at":"2026-11-10T19:17:57+00:00","first_seen_at":"2026-11-10T19:24:19+00:00","fetched_at":"2026-11-10T19:24:19+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}