---
id: "CVE-2026-112765"
page: "https://infrastack.ai/live/CVE-2026-112765"
kind: "vulnerability"
aliases: ["CVE-2026-112765"]
title: "Windows Print Spooler: heap overflow lets a local user gain higher privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows Print Spooler Components", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "print-spooler", "windows"]
not_affected_if: ["spooler-disabled"]
published_at: "2026-11-10T19:18:39+00:00"
first_seen_at: "2026-11-10T19:24:32+00:00"
updated_at: "2026-11-10T19:53:43+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112765", "first_seen_at": "2026-11-10T19:24:32+00:00"}]
exploit_sources: []
---

# Windows Print Spooler: heap overflow lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-112765 (this .md is for agents)

A heap-based buffer overflow in the Windows Print Spooler components lets an attacker who already has an account on the machine raise their privileges. The flaw is local, so the attacker must be able to run code or log on to the affected system first.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows Print Spooler Components affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T19:24:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112765

## From the sources

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_