{"id":"CVE-2026-118144","kind":"vulnerability","aliases":["CVE-2026-118144"],"related":[],"title":"Windows Smart Card: heap overflow lets a local user gain higher privileges","description":"Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.","summary":"A heap-based buffer overflow in the Windows Smart Card component lets an authorized attacker raise their privileges. The attack requires physical access to the machine with a smart card.","severity":"medium","cvss":6.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","smart-card","windows"],"not_affected_if":["no-smart-card-use"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:34+00:00","first_seen_at":"2026-11-10T19:24:49+00:00","triaged_at":"2026-11-10T19:56:00+00:00","updated_at":"2026-11-10T19:56:00+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:56:00Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Smart Card: heap overflow lets a local user gain higher privileges","impact":"high","summary":"A heap-based buffer overflow in the Windows Smart Card component lets an authorized attacker raise their privileges. The attack requires physical access to the machine with a smart card.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","smart-card"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated system privileges on the machine","analyst_note":"Confirm affected Windows builds and the Microsoft advisory and patch for CVE-2026-118144 from the NVD entry or the vendor's security update guide.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-smart-card-use"],"who_is_affected":"Windows machines that use smart card authentication or readers are the ones with the Smart Card component in use. The sources do not say which Windows versions are affected or whether the component is on by default. Systems that do not use smart cards are likely not exposed, but the sources do not confirm this.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000674,"input_tokens":4500,"output_tokens":447,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-118144':15A,18A '-2026':14A,17A 'access':47B 'allow':64C 'attack':39B,44B,67C,74C 'author':38B,66C 'base':27B,57C 'buffer':28B,58C 'card':3A,22B,34B,54B,63C 'compon':35B 'cve':13A,16A 'elev':69C 'gain':10A 'heap':4A,26B,56C 'heap-bas':25B,55C 'higher':11A 'infrastructur':19B 'let':6A,36B 'local':8A 'machin':50B 'overflow':5A,29B,59C 'physic':46B,73C 'privileg':12A,42B,70C 'rais':40B 'requir':45B 'smart':2A,21B,33B,53B,62C 'smart-card':20B 'user':9A 'window':1A,23B,32B,61C","nicknames":[],"mitigations":[],"who_affected":"Windows machines that use smart card authentication or readers are the ones with the Smart Card component in use. The sources do not say which Windows versions are affected or whether the component is on by default. Systems that do not use smart cards are likely not exposed, but the sources do not confirm this.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","smartcard","windows"],"campaign_type":null,"search_a":"'-118144':15A,18A '-2026':14A,17A 'card':3A 'cve':13A,16A 'gain':10A 'heap':4A 'higher':11A 'let':6A 'local':8A 'overflow':5A 'privileg':12A 'smart':2A 'user':9A 'window':1A","search_b":"'access':47B 'attack':39B,44B 'author':38B 'base':27B 'buffer':28B 'card':22B,34B,54B 'compon':35B 'heap':26B 'heap-bas':25B 'infrastructur':19B 'let':36B 'machin':50B 'overflow':29B 'physic':46B 'privileg':42B 'rais':40B 'requir':45B 'smart':21B,33B,53B 'smart-card':20B 'window':23B,32B","search_c":"'allow':64C 'attack':67C,74C 'author':66C 'base':57C 'buffer':58C 'card':63C 'elev':69C 'heap':56C 'heap-bas':55C 'overflow':59C 'physic':73C 'privileg':70C 'smart':62C 'window':61C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:34+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118144","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118144","severity":null,"published_at":"2026-11-10T19:19:34+00:00","modified_at":"2026-11-10T19:19:34+00:00","first_seen_at":"2026-11-10T19:24:49+00:00","fetched_at":"2026-11-10T19:24:49+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}