{"id":"CVE-2026-83894","kind":"vulnerability","aliases":["CVE-2026-83894"],"related":[],"title":"RPC Runtime: use-after-free lets a local user gain higher privileges","description":"Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.","summary":"A use-after-free bug in the RPC Runtime component lets an attacker who already has authorized local access trigger memory corruption. The sources say this lets the attacker elevate privileges on the machine.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"RPC Runtime","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["infrastructure","rpc","windows"],"not_affected_if":["no-local-untrusted-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:21:23+00:00","first_seen_at":"2026-11-10T19:25:17+00:00","triaged_at":"2026-11-10T19:50:05+00:00","updated_at":"2026-11-10T19:50:05+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:50:05Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"RPC Runtime: use-after-free lets a local user gain higher privileges","impact":"high","summary":"A use-after-free bug in the RPC Runtime component lets an attacker who already has authorized local access trigger memory corruption. The sources say this lets the attacker elevate privileges on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","rpc"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the machine","analyst_note":"Check the NVD entry and the vendor advisory for affected products, versions and the patch; the sources give no product list.","how_to_check":"unknown","plain_action":"","product_name":"RPC Runtime","needs_analyst":true,"not_affected_if":["no-local-untrusted-users"],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000636,"input_tokens":4476,"output_tokens":376,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the NVD entry and the vendor advisory for affected products, versions and the patch; the sources give no product list.","search":"'-2026':15A,18A '-83894':16A,19A 'access':44B 'allow':66C 'alreadi':40B 'attack':38B,54B,69C 'author':42B,68C 'bug':30B 'compon':35B 'corrupt':47B 'cve':14A,17A 'elev':55B,71C 'free':6A,29B,62C 'gain':11A 'higher':12A 'infrastructur':22B 'let':7A,36B,52B 'local':9A,43B,73C 'machin':59B 'memori':46B 'privileg':13A,56B,72C 'rpc':1A,20A,23B,33B,64C 'runtim':2A,34B,65C 'runtime':21A 'say':50B 'sourc':49B 'trigger':45B 'use':4A,27B,60C 'use-after-fre':3A,26B 'user':10A 'window':24B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["rpcruntime","runtime"],"ptokens":["rpc","runtime"],"labels":["high","infrastructure","rpc","vendor","windows"],"campaign_type":null,"search_a":"'-2026':15A,18A '-83894':16A,19A 'cve':14A,17A 'free':6A 'gain':11A 'higher':12A 'let':7A 'local':9A 'privileg':13A 'rpc':1A,20A 'runtim':2A 'runtime':21A 'use':4A 'use-after-fre':3A 'user':10A","search_b":"'access':44B 'alreadi':40B 'attack':38B,54B 'author':42B 'bug':30B 'compon':35B 'corrupt':47B 'elev':55B 'free':29B 'infrastructur':22B 'let':36B,52B 'local':43B 'machin':59B 'memori':46B 'privileg':56B 'rpc':23B,33B 'runtim':34B 'say':50B 'sourc':49B 'trigger':45B 'use':27B 'use-after-fre':26B 'window':24B","search_c":"'allow':66C 'attack':69C 'author':68C 'elev':71C 'free':62C 'local':73C 'privileg':72C 'rpc':64C 'runtim':65C 'use':60C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:23+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-83894","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-83894","severity":null,"published_at":"2026-11-10T19:21:23+00:00","modified_at":"2026-11-10T19:21:24+00:00","first_seen_at":"2026-11-10T19:25:17+00:00","fetched_at":"2026-11-10T19:25:17+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}