{"id":"CVE-2026-122297","kind":"vulnerability","aliases":["CVE-2026-122297"],"related":[],"title":"Windows Kernel Transaction Manager: uninitialized memory leaks data to local users","description":"Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.","summary":"Kernel Transaction Manager reads a resource it never initialized, so an authorized local user can read information it should not see. The sources do not say which Windows versions are affected.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kernel","windows"],"not_affected_if":["no-local-accounts"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:37+00:00","first_seen_at":"2026-11-10T19:25:11+00:00","triaged_at":"2026-11-10T20:00:37+00:00","updated_at":"2026-11-10T20:00:37+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:00:37Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Kernel Transaction Manager: uninitialized memory leaks data to local users","impact":"low","summary":"Kernel Transaction Manager reads a resource it never initialized, so an authorized local user can read information it should not see. The sources do not say which Windows versions are affected.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","kernel"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user reads kernel memory contents","analyst_note":"Confirm affected Windows builds and the Microsoft patch from the NVD entry or the vendor advisory.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-accounts"],"who_is_affected":"Only a local user who already has an account on the machine can trigger it, per the description. The sources do not name affected products or versions, so the exposed systems are unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000642,"input_tokens":4492,"output_tokens":386,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-122297':14A,17A '-2026':13A,16A 'affect':51B 'allow':60C 'attack':63C 'author':32B,62C 'cve':12A,15A 'data':8A 'disclos':65C 'inform':37B,66C 'infrastructur':18B 'initi':29B 'kernel':2A,19B,21B,57C 'leak':7A 'local':10A,33B,67C 'manag':4A,23B,59C 'memori':6A 'never':28B 'read':24B,36B 'resourc':26B,55C 'say':46B 'see':41B 'sourc':43B 'transact':3A,22B,58C 'uniniti':5A,54C 'use':52C 'user':11A,34B 'version':49B 'window':1A,20B,48B","nicknames":[],"mitigations":[],"who_affected":"Only a local user who already has an account on the machine can trigger it, per the description. The sources do not name affected products or versions, so the exposed systems are unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","kernel","medium","windows"],"campaign_type":null,"search_a":"'-122297':14A,17A '-2026':13A,16A 'cve':12A,15A 'data':8A 'kernel':2A 'leak':7A 'local':10A 'manag':4A 'memori':6A 'transact':3A 'uniniti':5A 'user':11A 'window':1A","search_b":"'affect':51B 'author':32B 'inform':37B 'infrastructur':18B 'initi':29B 'kernel':19B,21B 'local':33B 'manag':23B 'never':28B 'read':24B,36B 'resourc':26B 'say':46B 'see':41B 'sourc':43B 'transact':22B 'user':34B 'version':49B 'window':20B,48B","search_c":"'allow':60C 'attack':63C 'author':62C 'disclos':65C 'inform':66C 'kernel':57C 'local':67C 'manag':59C 'resourc':55C 'transact':58C 'uniniti':54C 'use':52C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:37+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-122297","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122297","severity":null,"published_at":"2026-11-10T19:20:37+00:00","modified_at":"2026-11-10T19:20:37+00:00","first_seen_at":"2026-11-10T19:25:11+00:00","fetched_at":"2026-11-10T19:25:11+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}