---
id: "CVE-2026-88230"
page: "https://infrastack.ai/live/CVE-2026-88230"
kind: "vulnerability"
aliases: ["CVE-2026-88230"]
title: "Windows LUAFV heap overflow lets a local user gain higher privileges"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "local-privilege-escalation", "luafv", "patch-tuesday", "windows"]
not_affected_if: ["no-local-access"]
published_at: "2026-11-10T19:21:31+00:00"
first_seen_at: "2026-11-10T19:25:19+00:00"
updated_at: "2026-11-10T20:43:52+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88230", "first_seen_at": "2026-11-10T19:25:19+00:00"}, {"source": "analyst", "url": "https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-88230", "first_seen_at": "2026-11-10T20:43:52+00:00", "cites": ["https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-88230", "https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-17534.html"]}]
exploit_sources: []
---

# Windows LUAFV heap overflow lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-88230 (this .md is for agents)

A heap buffer overflow in the Windows LUAFV driver lets a logged-in local user gain higher privileges (CVSS 7.8). Per Check Point, which copied Microsoft's list, it touches Windows 10 1607 to 22H2, Windows 11 23H2 to 26H2 and 26H1, and Windows Server 2016, 2019, 2022 and 2025. An attacker needs an existing local account, so shared machines, terminal servers, developer workstations and CI runners matter most. No exploitation is reported.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Install the November 2026 Windows cumulative update (released 2026-11-10) and compare the installed KB with the one listed for your Windows build in the Microsoft Security Update Guide entry for CVE-2026-88230. Per-build KB numbers: unknown, not read from Microsoft's page.

## Fix

Install the November 2026 Windows security update for your build (KB number unknown, see MSRC entry).

## Timeline

- 2026-11-10T19:25:19+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-88230
- 2026-11-10T20:43:52+00:00 analyst https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-88230 — Microsoft Nov 2026 Patch Tuesday (MSRC update index, 2026-11-10); affected list from Check Point only (MSRC page is JS, KB numbers not read). No exploitation or PoC found. Nothing verified.

## Documents

- [advisory] MSRC: CVE-2026-88230 released in November 2026 Security Updates https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-88230
- [describes] Check Point CPAI-2026-17534 https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-17534.html

## From the sources

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_