---
id: "CVE-2026-112805"
page: "https://infrastack.ai/live/CVE-2026-112805"
kind: "vulnerability"
aliases: ["CVE-2026-112805"]
title: "Windows Kernel: untrusted pointer lets a local user gain system privileges"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "kernel", "local-privilege-escalation", "windows"]
not_affected_if: ["no-untrusted-local-users"]
published_at: "2026-11-10T19:18:43+00:00"
first_seen_at: "2026-11-10T19:24:34+00:00"
updated_at: "2026-11-11T00:04:00+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112805", "first_seen_at": "2026-11-10T19:24:34+00:00"}, {"source": "analyst", "url": "https://ugetfix.com/updates/kb5132043/", "first_seen_at": "2026-11-11T00:04:00+00:00", "cites": ["https://ugetfix.com/updates/kb5132043/", "https://support.microsoft.com/help/5132043"]}]
exploit_sources: []
---

# Windows Kernel: untrusted pointer lets a local user gain system privileges

Link for people: https://infrastack.ai/live/CVE-2026-112805 (this .md is for agents)

Microsoft's November 2026 Patch Tuesday lists this as a Windows Kernel elevation-of-privilege flaw rated Important (CVSS 8.8). A user with a local account can exploit it by dereferencing an untrusted pointer, and gains higher privileges. Microsoft has not said it is exploited. We have not yet read the CVE's own Microsoft entry.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Run winver (or [System.Environment]::OSVersion) and check that the build is at least the one in the November 10 2026 cumulative update. For Windows 11 24H2, 25H2 and 26H2 (KB5132043 hotpatch) the builds are 26100.9911, 26200.9911 and 26300.9911. Check the CVE's Security Update Guide entry for your exact build, including Windows 10 and Server, because we could not read it.

## Fix

Install the November 10 2026 Windows cumulative update. KB5132043 for Windows 11 24H2/25H2/26H2 is reported (by a third-party aggregator, not by Microsoft's KB page) to include this CVE. Other Windows versions: see the Security Update Guide entry for the KB number.

## Timeline

- 2026-11-10T19:24:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112805
- 2026-11-11T00:04:00+00:00 analyst https://ugetfix.com/updates/kb5132043/ — MSRC update-guide page is JS-only and browser-cli is out of quota, so no primary page naming the CVE was read. Third-party aggregator ugetfix lists it as 'Windows Kernel Elevation of Privilege', Important, CVSS 8.8, fixed in the Nov 10 2026 Patch Tuesday update KB5132043. Microsoft's own KB page confirms the KB and builds but does not name the CVE. Nothing verified.

## Documents

- [describes] KB5132043: what it fixes and who gets it (third-party aggregator of Microsoft data) https://ugetfix.com/updates/kb5132043/
- [mentions] November 10, 2026 Hotpatch KB5132043 (OS Builds 26300.9911, 26200.9911, 26100.9911) https://support.microsoft.com/help/5132043

## From the sources

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_