{"id":"CVE-2026-112814","kind":"vulnerability","aliases":["CVE-2026-112814"],"related":[],"title":"Windows Management Instrumentation: out-of-bounds read lets a local user gain privileges","description":"Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.","summary":"Windows Management Instrumentation has an out-of-bounds read that lets an authorized local user elevate their privileges. The sources give a CVSS score of 5.5 and no public exploitation.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","self-hosted","windows"],"not_affected_if":["single-user-machines"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:46+00:00","first_seen_at":"2026-11-10T19:24:34+00:00","triaged_at":"2026-11-10T20:02:08+00:00","updated_at":"2026-11-10T20:02:08+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:02:08Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Management Instrumentation: out-of-bounds read lets a local user gain privileges","impact":"high","summary":"Windows Management Instrumentation has an out-of-bounds read that lets an authorized local user elevate their privileges. The sources give a CVSS score of 5.5 and no public exploitation.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains higher privileges on the Windows machine","analyst_note":"Find the affected Windows builds and the Microsoft security update from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-112814 and the Microsoft Security Response Center advisory.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["single-user-machines"],"who_is_affected":"Only users who already have a local account on a Windows machine can use this flaw, so shared workstations and servers with many local users carry the most exposure. The sources do not name affected Windows builds or which configurations are exposed.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000678,"input_tokens":4495,"output_tokens":456,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112814':17A,20A '-2026':16A,19A '5.5':52B 'allow':66C 'attack':69C 'author':39B,68C 'bound':7A,34B,60C 'cve':15A,18A 'cvss':49B 'elev':42B,71C 'exploit':56B 'gain':13A 'give':47B 'host':24B 'infrastructur':21B 'instrument':3A,28B,65C 'let':9A,37B 'local':11A,40B,73C 'manag':2A,27B,64C 'out-of-bound':4A,31B,57C 'privileg':14A,44B,72C 'public':55B 'read':8A,35B,61C 'score':50B 'self':23B 'self-host':22B 'sourc':46B 'user':12A,41B 'window':1A,25B,26B,63C","nicknames":[],"mitigations":[],"who_affected":"Only users who already have a local account on a Windows machine can use this flaw, so shared workstations and servers with many local users carry the most exposure. The sources do not name affected Windows builds or which configurations are exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","selfhosted","windows"],"campaign_type":null,"search_a":"'-112814':17A,20A '-2026':16A,19A 'bound':7A 'cve':15A,18A 'gain':13A 'instrument':3A 'let':9A 'local':11A 'manag':2A 'out-of-bound':4A 'privileg':14A 'read':8A 'user':12A 'window':1A","search_b":"'5.5':52B 'author':39B 'bound':34B 'cvss':49B 'elev':42B 'exploit':56B 'give':47B 'host':24B 'infrastructur':21B 'instrument':28B 'let':37B 'local':40B 'manag':27B 'out-of-bound':31B 'privileg':44B 'public':55B 'read':35B 'score':50B 'self':23B 'self-host':22B 'sourc':46B 'user':41B 'window':25B,26B","search_c":"'allow':66C 'attack':69C 'author':68C 'bound':60C 'elev':71C 'instrument':65C 'local':73C 'manag':64C 'out-of-bound':57C 'privileg':72C 'read':61C 'window':63C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:46+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112814","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112814","severity":null,"published_at":"2026-11-10T19:18:46+00:00","modified_at":"2026-11-10T19:18:46+00:00","first_seen_at":"2026-11-10T19:24:34+00:00","fetched_at":"2026-11-10T19:24:34+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}