---
id: "CVE-2026-113769"
page: "https://infrastack.ai/live/CVE-2026-113769"
kind: "vulnerability"
aliases: ["CVE-2026-113769"]
title: "Windows COM+ Event System: use-after-free lets local users gain privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["com-plus", "infrastructure", "local-privilege-escalation", "windows"]
not_affected_if: ["no-local-untrusted-users"]
published_at: "2026-11-10T19:18:56+00:00"
first_seen_at: "2026-11-10T19:24:40+00:00"
updated_at: "2026-11-10T23:52:25+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113769", "first_seen_at": "2026-11-10T19:24:40+00:00"}, {"source": "analyst", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113769", "first_seen_at": "2026-11-10T23:52:25+00:00", "cites": ["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113769"]}]
exploit_sources: []
---

# Windows COM+ Event System: use-after-free lets local users gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-113769 (this .md is for agents)

Microsoft's advisory (Nov 10, 2026) describes a use-after-free in the Windows COM+ Event System Service. A local user with low privileges who wins a race condition can gain SYSTEM. Microsoft rates it Important (CVSS 7.0), not publicly disclosed, not exploited, 'Exploitation Less Likely', and says an official fix exists.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Check the installed update against the Security Updates table for CVE-2026-113769 in the MSRC Update Guide (your Windows version, KB number, build). On a host, run 'winver' or 'Get-HotFix' and compare with the fixed build. Affected builds: unknown.

## Fix

Microsoft lists an official fix (Remediation Level: Official Fix) released Nov 10, 2026. Install the November 2026 Windows cumulative security update for your Windows version. The KB article and build numbers are not readable in the MSRC page text I could fetch: unknown.

## Timeline

- 2026-11-10T19:24:40+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113769
- 2026-11-10T23:52:25+00:00 analyst https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113769 — Read MSRC advisory: LPE to SYSTEM, race condition (AC:H), not exploited, no PoC, official fix released. Product/build/KB table is JS-rendered and empty in fetch, so affected builds and KBs are unknown; nothing verified.

## Documents

- [advisory] MSRC: Windows COM+ Event System Service EoP CVE-2026-113769 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113769

## From the sources

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_