{"id":"CVE-2026-112802","kind":"vulnerability","aliases":["CVE-2026-112802"],"related":[],"title":"Windows Kernel: missing authorization lets a local user gain higher privileges","description":"Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.","summary":"A missing authorization check in the Windows kernel lets an attacker who already has a local account raise their privileges. The sources give no further detail on the exact code path.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","self-hosted","windows"],"not_affected_if":["no-local-untrusted-users"],"how_to_check":"- Run `winver` on the machine and compare the build against Microsoft's security update guide for CVE-2026-112802\n- Check Windows Update history for the most recent cumulative update installed","fix":null,"status":"open","published_at":"2026-11-10T19:18:42+00:00","first_seen_at":"2026-11-10T19:24:33+00:00","triaged_at":"2026-11-10T19:42:12+00:00","updated_at":"2026-11-10T19:42:12+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:42:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Kernel: missing authorization lets a local user gain higher privileges","impact":"high","summary":"A missing authorization check in the Windows kernel lets an attacker who already has a local account raise their privileges. The sources give no further detail on the exact code path.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains SYSTEM-level control of the machine","analyst_note":"Confirm affected Windows builds and the fixed update from Microsoft's security update guide for CVE-2026-112802; the NVD entry gives no product ranges.","how_to_check":"- Run `winver` on the machine and compare the build against Microsoft's security update guide for CVE-2026-112802\n- Check Windows Update history for the most recent cumulative update installed","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-untrusted-users"],"who_is_affected":"Any Windows machine where an untrusted or low-privilege user can log on or run code locally is potentially exposed. Machines with only administrators logged in and no shared local accounts carry less practical risk. The sources do not name affected Windows builds.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000692,"input_tokens":4480,"output_tokens":489,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Confirm affected Windows builds and the fixed update from Microsoft's security update guide for CVE-2026-112802; the NVD entry gives no product ranges.","search":"'-112802':14A,17A '-2026':13A,16A 'account':39B 'allow':59C 'alreadi':35B 'attack':33B,62C 'author':4A,25B,55C,61C 'check':26B 'code':52B 'cve':12A,15A 'detail':48B 'elev':64C 'exact':51B 'gain':9A 'give':45B 'higher':10A 'host':21B 'infrastructur':18B 'kernel':2A,30B,58C 'let':5A,31B 'local':7A,38B,66C 'miss':3A,24B,54C 'path':53B 'privileg':11A,42B,65C 'rais':40B 'self':20B 'self-host':19B 'sourc':44B 'user':8A 'window':1A,22B,29B,57C","nicknames":[],"mitigations":[],"who_affected":"Any Windows machine where an untrusted or low-privilege user can log on or run code locally is potentially exposed. Machines with only administrators logged in and no shared local accounts carry less practical risk. The sources do not name affected Windows builds.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","selfhosted","windows"],"campaign_type":null,"search_a":"'-112802':14A,17A '-2026':13A,16A 'author':4A 'cve':12A,15A 'gain':9A 'higher':10A 'kernel':2A 'let':5A 'local':7A 'miss':3A 'privileg':11A 'user':8A 'window':1A","search_b":"'account':39B 'alreadi':35B 'attack':33B 'author':25B 'check':26B 'code':52B 'detail':48B 'exact':51B 'give':45B 'host':21B 'infrastructur':18B 'kernel':30B 'let':31B 'local':38B 'miss':24B 'path':53B 'privileg':42B 'rais':40B 'self':20B 'self-host':19B 'sourc':44B 'window':22B,29B","search_c":"'allow':59C 'attack':62C 'author':55C,61C 'elev':64C 'kernel':58C 'local':66C 'miss':54C 'privileg':65C 'window':57C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:42+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112802","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112802","severity":null,"published_at":"2026-11-10T19:18:42+00:00","modified_at":"2026-11-10T19:18:42+00:00","first_seen_at":"2026-11-10T19:24:33+00:00","fetched_at":"2026-11-10T19:24:33+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}