{"id":"CVE-2026-113750","kind":"vulnerability","aliases":["CVE-2026-113750"],"related":[],"title":"Windows Device Inventory: heap overflow lets a local user gain higher privileges","description":"Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in the Windows Device Inventory component lets an authorized local user elevate their privileges. The sources give no further detail on the trigger or the affected Windows builds.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Windows Device Inventory","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["infrastructure","windows"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:52+00:00","first_seen_at":"2026-11-10T19:24:37+00:00","triaged_at":"2026-11-10T19:52:20+00:00","updated_at":"2026-11-10T19:52:20+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:52:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Device Inventory: heap overflow lets a local user gain higher privileges","impact":"high","summary":"A heap-based buffer overflow in the Windows Device Inventory component lets an authorized local user elevate their privileges. The sources give no further detail on the trigger or the affected Windows builds.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains higher privileges on the Windows machine","analyst_note":"Find the Microsoft advisory for CVE-2026-113750 at MSRC to confirm affected Windows builds, the patched build, and any check.","how_to_check":"unknown","plain_action":"","product_name":"Windows Device Inventory","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Affects Windows systems where the Device Inventory component is present; the sources do not list affected builds or configuration. Only users who already hold an authorized local account can exploit it, so shared or multi-user machines carry the most risk.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000675,"input_tokens":4494,"output_tokens":452,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the Microsoft advisory for CVE-2026-113750 at MSRC to confirm affected Windows builds, the patched build, and any check.","search":"'-113750':15A,18A '-2026':14A,17A 'affect':55B 'allow':67C 'attack':70C 'author':38B,69C 'base':27B,60C 'buffer':28B,61C 'build':57B 'compon':35B 'cve':13A,16A 'detail':49B 'devic':2A,33B,65C 'device':20A 'elev':41B,72C 'gain':10A 'give':46B 'heap':4A,26B,59C 'heap-bas':25B,58C 'higher':11A 'infrastructur':22B 'inventori':3A,34B,66C 'inventory':21A 'let':6A,36B 'local':8A,39B,74C 'overflow':5A,29B,62C 'privileg':12A,43B,73C 'sourc':45B 'trigger':52B 'user':9A,40B 'window':1A,23B,32B,56B,64C 'windows':19A","nicknames":[],"mitigations":[],"who_affected":"Affects Windows systems where the Device Inventory component is present; the sources do not list affected builds or configuration. Only users who already hold an authorized local account can exploit it, so shared or multi-user machines carry the most risk.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["deviceinventory","windowsdeviceinventory"],"ptokens":["device","inventory","windows"],"labels":["high","infrastructure","vendor","windows"],"campaign_type":null,"search_a":"'-113750':15A,18A '-2026':14A,17A 'cve':13A,16A 'devic':2A 'device':20A 'gain':10A 'heap':4A 'higher':11A 'inventori':3A 'inventory':21A 'let':6A 'local':8A 'overflow':5A 'privileg':12A 'user':9A 'window':1A 'windows':19A","search_b":"'affect':55B 'author':38B 'base':27B 'buffer':28B 'build':57B 'compon':35B 'detail':49B 'devic':33B 'elev':41B 'give':46B 'heap':26B 'heap-bas':25B 'infrastructur':22B 'inventori':34B 'let':36B 'local':39B 'overflow':29B 'privileg':43B 'sourc':45B 'trigger':52B 'user':40B 'window':23B,32B,56B","search_c":"'allow':67C 'attack':70C 'author':69C 'base':60C 'buffer':61C 'devic':65C 'elev':72C 'heap':59C 'heap-bas':58C 'inventori':66C 'local':74C 'overflow':62C 'privileg':73C 'window':64C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:52+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113750","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113750","severity":null,"published_at":"2026-11-10T19:18:52+00:00","modified_at":"2026-11-10T19:18:53+00:00","first_seen_at":"2026-11-10T19:24:37+00:00","fetched_at":"2026-11-10T19:24:37+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}