{"id":"CVE-2026-122984","kind":"vulnerability","aliases":["CVE-2026-122984"],"related":[],"title":"Windows UDF file system driver heap overflow lets local users gain privileges","description":"Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in the Windows Universal Disk Format (UDFS) file system driver lets an authorized local attacker raise their privileges. The sources give no exploit status and no affected versions.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:37+00:00","first_seen_at":"2026-11-10T19:25:11+00:00","triaged_at":"2026-11-10T19:38:53+00:00","updated_at":"2026-11-10T19:38:53+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T19:38:53Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows UDF file system driver heap overflow lets local users gain privileges","impact":"high","summary":"A heap-based buffer overflow in the Windows Universal Disk Format (UDFS) file system driver lets an authorized local attacker raise their privileges. The sources give no exploit status and no affected versions.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated system privileges on the machine","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-122984 for affected Windows builds, the fixed update, and any exploit status.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Affected systems are Windows machines where a local user has an account; the sources do not list affected Windows versions. Systems without local untrusted users face lower risk. unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000654,"input_tokens":4512,"output_tokens":405,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-122984 for affected Windows builds, the fixed update, and any exploit status.","search":"'-122984':15A,18A '-2026':14A,17A 'affect':53B 'allow':69C 'attack':41B,72C 'author':39B,71C 'base':24B,57C 'buffer':25B,58C 'cve':13A,16A 'disk':31B,63C 'driver':5A,36B,67C 'elev':74C 'exploit':49B 'file':3A,34B,65C 'format':32B,64C 'gain':11A 'give':47B 'heap':6A,23B,56C 'heap-bas':22B,55C 'infrastructur':19B 'let':8A,37B 'local':9A,40B,76C 'overflow':7A,26B,59C 'privileg':12A,44B,75C 'rais':42B 'sourc':46B 'status':50B 'system':4A,35B,66C 'udf':2A,33B,68C 'univers':30B,62C 'user':10A 'version':54B 'window':1A,20B,29B,61C","nicknames":[],"mitigations":[],"who_affected":"Affected systems are Windows machines where a local user has an account; the sources do not list affected Windows versions. Systems without local untrusted users face lower risk. unknown","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","windows"],"campaign_type":null,"search_a":"'-122984':15A,18A '-2026':14A,17A 'cve':13A,16A 'driver':5A 'file':3A 'gain':11A 'heap':6A 'let':8A 'local':9A 'overflow':7A 'privileg':12A 'system':4A 'udf':2A 'user':10A 'window':1A","search_b":"'affect':53B 'attack':41B 'author':39B 'base':24B 'buffer':25B 'disk':31B 'driver':36B 'exploit':49B 'file':34B 'format':32B 'give':47B 'heap':23B 'heap-bas':22B 'infrastructur':19B 'let':37B 'local':40B 'overflow':26B 'privileg':44B 'rais':42B 'sourc':46B 'status':50B 'system':35B 'udf':33B 'univers':30B 'version':54B 'window':20B,29B","search_c":"'allow':69C 'attack':72C 'author':71C 'base':57C 'buffer':58C 'disk':63C 'driver':67C 'elev':74C 'file':65C 'format':64C 'heap':56C 'heap-bas':55C 'local':76C 'overflow':59C 'privileg':75C 'system':66C 'udf':68C 'univers':62C 'window':61C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:37+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-122984","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122984","severity":null,"published_at":"2026-11-10T19:20:37+00:00","modified_at":"2026-11-10T19:20:38+00:00","first_seen_at":"2026-11-10T19:25:11+00:00","fetched_at":"2026-11-10T19:25:11+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}