---
id: "CVE-2026-88228"
page: "https://infrastack.ai/live/CVE-2026-88228"
kind: "vulnerability"
aliases: ["CVE-2026-88228"]
title: "Windows LSASS: heap overflow lets a local user gain higher privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "local-users", "lsass", "privilege-escalation", "windows"]
not_affected_if: ["no-local-untrusted-users"]
published_at: "2026-11-10T19:21:31+00:00"
first_seen_at: "2026-11-10T19:25:19+00:00"
updated_at: "2026-11-10T20:45:51+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88228", "first_seen_at": "2026-11-10T19:25:19+00:00"}, {"source": "analyst", "url": "https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-88228", "first_seen_at": "2026-11-10T20:45:51+00:00", "cites": ["https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-88228"]}]
exploit_sources: []
---

# Windows LSASS: heap overflow lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-88228 (this .md is for agents)

Microsoft's November 2026 update fixes a heap buffer overflow in LSASS. A local user with a low-privilege account who wins a race condition can gain SYSTEM. Microsoft rates it Important, CVSS 7.0, Exploitation Less Likely, not publicly disclosed and not exploited at release.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Open the Microsoft Update Guide entry for CVE-2026-88228 and match your Windows build to the listed KB; the API data we could read gives no build list. Confirm the November 2026 cumulative update is installed (Settings > Windows Update > Update history, or Get-HotFix).

## Timeline

- 2026-11-10T19:25:19+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-88228
- 2026-11-10T20:45:51+00:00 analyst https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-88228 — MSRC Update Guide API entry read (JS page was empty): Important EoP, not exploited, not disclosed, Exploitation Less Likely, race condition, SYSTEM. Affected builds and fixing KBs not in the data, so fix and products left unset, nothing marked verified. Revisit when the build table is available.

## Documents

- [advisory] MSRC: CVE-2026-88228 Windows LSASS Elevation of Privilege Vulnerability (Update Guide data) https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-88228

## From the sources

Heap-based buffer overflow in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_