{"id":"CVE-2026-113816","kind":"vulnerability","aliases":["CVE-2026-113816"],"related":[],"title":"Windows: LLDP integer overflow lets a local user gain privileges","description":"Integer overflow or wraparound in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally.","summary":"An integer overflow in the Windows Link-Layer Discovery Protocol (LLDP) component can be triggered by an authorized local attacker. A successful attack lets that attacker elevate their privileges on the machine.","severity":"medium","cvss":4.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","lldp","windows"],"not_affected_if":["no-local-untrusted-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:00+00:00","first_seen_at":"2026-11-10T19:24:41+00:00","triaged_at":"2026-11-10T20:04:30+00:00","updated_at":"2026-11-10T20:04:30+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:04:30Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows: LLDP integer overflow lets a local user gain privileges","impact":"high","summary":"An integer overflow in the Windows Link-Layer Discovery Protocol (LLDP) component can be triggered by an authorized local attacker. A successful attack lets that attacker elevate their privileges on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","lldp"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the Windows machine","analyst_note":"Confirm affected Windows builds, the patch, and whether LLDP is enabled by default, using the Microsoft Security Response Center advisory for CVE-2026-113816.","how_to_check":"- unknown","plain_action":"","product_name":"Windows LLDP","needs_analyst":true,"not_affected_if":["no-local-untrusted-users"],"who_is_affected":"Windows machines where a user already has a local account can be affected by this flaw in the LLDP component. The sources do not say which Windows builds are affected or whether LLDP is enabled by default. Systems where no untrusted users have local logons carry less risk.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000693,"input_tokens":4516,"output_tokens":483,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-113816':13A,16A '-2026':12A,15A 'allow':65C 'attack':40B,43B,46B,68C 'author':38B,67C 'compon':32B 'cve':11A,14A 'discoveri':29B,62C 'elev':47B,70C 'gain':9A 'infrastructur':17B 'integ':3A,21B,53C 'layer':28B,61C 'let':5A,44B 'link':27B,60C 'link-lay':26B,59C 'lldp':2A,18B,31B,64C 'local':7A,39B,72C 'machin':52B 'overflow':4A,22B,54C 'privileg':10A,49B,71C 'protocol':30B,63C 'success':42B 'trigger':35B 'user':8A 'window':1A,19B,25B,58C 'wraparound':56C","nicknames":[],"mitigations":[],"who_affected":"Windows machines where a user already has a local account can be affected by this flaw in the LLDP component. The sources do not say which Windows builds are affected or whether LLDP is enabled by default. Systems where no untrusted users have local logons carry less risk.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","lldp","medium","windows"],"campaign_type":null,"search_a":"'-113816':13A,16A '-2026':12A,15A 'cve':11A,14A 'gain':9A 'integ':3A 'let':5A 'lldp':2A 'local':7A 'overflow':4A 'privileg':10A 'user':8A 'window':1A","search_b":"'attack':40B,43B,46B 'author':38B 'compon':32B 'discoveri':29B 'elev':47B 'infrastructur':17B 'integ':21B 'layer':28B 'let':44B 'link':27B 'link-lay':26B 'lldp':18B,31B 'local':39B 'machin':52B 'overflow':22B 'privileg':49B 'protocol':30B 'success':42B 'trigger':35B 'window':19B,25B","search_c":"'allow':65C 'attack':68C 'author':67C 'discoveri':62C 'elev':70C 'integ':53C 'layer':61C 'link':60C 'link-lay':59C 'lldp':64C 'local':72C 'overflow':54C 'privileg':71C 'protocol':63C 'window':58C 'wraparound':56C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:00+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113816","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113816","severity":null,"published_at":"2026-11-10T19:19:00+00:00","modified_at":"2026-11-10T19:19:01+00:00","first_seen_at":"2026-11-10T19:24:41+00:00","fetched_at":"2026-11-10T19:24:41+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}