---
id: "CVE-2026-88241"
page: "https://infrastack.ai/live/CVE-2026-88241"
kind: "vulnerability"
aliases: ["CVE-2026-88241"]
title: "Windows Sensor Data Service: heap overflow lets a local user gain Local Service privileges (fixed in November 2026 updates)"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows 11 26H1", "fixed": ["10.0.28000.3501"], "affected": "< 10.0.28000.3501", "ecosystem": "vendor"}, {"name": "Windows 11 26H2", "fixed": ["10.0.26300.9974"], "affected": "< 10.0.26300.9974", "ecosystem": "vendor"}, {"name": "Windows 11 25H2", "fixed": ["10.0.26200.9974"], "affected": "< 10.0.26200.9974", "ecosystem": "vendor"}, {"name": "Windows 11 24H2", "fixed": ["10.0.26100.9974"], "affected": "< 10.0.26100.9974", "ecosystem": "vendor"}, {"name": "Windows Server 2025", "fixed": ["10.0.26100.33822"], "affected": "< 10.0.26100.33822", "ecosystem": "vendor"}, {"name": "Windows 11 23H2", "fixed": ["10.0.22631.7711"], "affected": "< 10.0.22631.7711", "ecosystem": "vendor"}, {"name": "Windows 10 22H2", "fixed": ["10.0.19045.7846"], "affected": "< 10.0.19045.7846", "ecosystem": "vendor"}, {"name": "Windows 10 21H2", "fixed": ["10.0.19044.7846"], "affected": "< 10.0.19044.7846", "ecosystem": "vendor"}, {"name": "Windows Server 2022", "fixed": ["10.0.20348.5870"], "affected": "< 10.0.20348.5870", "ecosystem": "vendor"}, {"name": "Windows Server 2019 / Windows 10 1809", "fixed": ["10.0.17763.9487"], "affected": "< 10.0.17763.9487", "ecosystem": "vendor"}, {"name": "Windows Server 2016 / Windows 10 1607", "fixed": ["10.0.14393.9688"], "affected": "< 10.0.14393.9688", "ecosystem": "vendor"}]
ecosystems: []
tags: ["infrastructure", "local", "privilege-escalation", "sensor-data-service", "windows", "windows-10", "windows-11", "windows-server"]
not_affected_if: ["patched-nov-2026"]
published_at: "2026-11-10T19:21:33+00:00"
first_seen_at: "2026-11-10T19:25:20+00:00"
updated_at: "2026-11-10T20:41:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88241", "first_seen_at": "2026-11-10T19:25:20+00:00"}, {"source": "analyst", "url": "https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-88241", "first_seen_at": "2026-11-10T20:41:19+00:00", "cites": ["https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-88241", "https://api.msrc.microsoft.com/sug/v2.0/en-US/affectedProduct?%24filter=cveNumber%20eq%20%27CVE-2026-88241%27"]}]
exploit_sources: []
---

# Windows Sensor Data Service: heap overflow lets a local user gain Local Service privileges (fixed in November 2026 updates)

Link for people: https://infrastack.ai/live/CVE-2026-88241 (this .md is for agents)

Heap-based buffer overflow (CWE-122) in the Windows Sensor Data Service. An attacker who already has a low-privileged local account can raise privileges from Medium integrity to Local Service, per Microsoft. Microsoft rates it Important (CVSS 7.8), says it is not exploited and not publicly disclosed, and marks Exploitation Less Likely. Fixed in the 10 Nov 2026 Patch Tuesday cumulative updates.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows 11 26H1 affected < 10.0.28000.3501 fixed 10.0.28000.3501
- vendor:Windows 11 26H2 affected < 10.0.26300.9974 fixed 10.0.26300.9974
- vendor:Windows 11 25H2 affected < 10.0.26200.9974 fixed 10.0.26200.9974
- vendor:Windows 11 24H2 affected < 10.0.26100.9974 fixed 10.0.26100.9974
- vendor:Windows Server 2025 affected < 10.0.26100.33822 fixed 10.0.26100.33822
- vendor:Windows 11 23H2 affected < 10.0.22631.7711 fixed 10.0.22631.7711
- vendor:Windows 10 22H2 affected < 10.0.19045.7846 fixed 10.0.19045.7846
- vendor:Windows 10 21H2 affected < 10.0.19044.7846 fixed 10.0.19044.7846
- vendor:Windows Server 2022 affected < 10.0.20348.5870 fixed 10.0.20348.5870
- vendor:Windows Server 2019 / Windows 10 1809 affected < 10.0.17763.9487 fixed 10.0.17763.9487
- vendor:Windows Server 2016 / Windows 10 1607 affected < 10.0.14393.9688 fixed 10.0.14393.9688

## How to check

Compare your full build (10.0.<build>.<UBR>, from winver or the CurrentBuild and UBR registry values under HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion) with the fixed build in the product rows. Or check the KB for your edition with Get-HotFix -Id: KB5131087 (Win11 23H2), KB5132061 (Win11 24H2/25H2/26H2), KB5131096 (Win10 22H2/21H2), KB5131080 (Server 2025), KB5131090 (Server 2022), KB5131085 (Server 2019/1809), KB5131291 (Server 2016/Win10 1607). Newer cumulative updates supersede these.

## Fix

Install the 10 Nov 2026 Windows cumulative update: Win11 26H1 KB5132059 (10.0.28000.3501); Win11 26H2 KB5132061 (10.0.26300.9974); Win11 25H2 KB5132061 (10.0.26200.9974); Win11 24H2 KB5132061 (10.0.26100.9974 as MSRC lists it); Server 2025 KB5131080 (10.0.26100.33822; hotpatch KB5131077 10.0.26100.33730); Win11 23H2 KB5131087 (10.0.22631.7711); Win10 22H2 KB5131096 (10.0.19045.7846); Win10 21H2 KB5131096 (10.0.19044.7846); Server 2022 KB5131090 (10.0.20348.5870); Server 2019/Win10 1809 KB5131085 (10.0.17763.9487); Server 2016/Win10 1607 KB5131291 (10.0.14393.9688). Reboot required except the hotpatch. MSRC lists no workaround.

## Timeline

- 2026-11-10T19:25:20+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-88241
- 2026-11-10T20:41:19+00:00 analyst https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-88241 — Read MSRC Security Update Guide API (vendor): Important, CVSS 7.8 (AV:L/PR:L), not exploited, not publicly disclosed, Exploitation Less Likely; fixed in 2026-Nov cumulative updates for 28 product rows. The msrc.microsoft.com page is JS-only, so the API JSON was used. Did not search X/discussion (unexploited local EoP). Oddity: MSRC lists Windows 11 24H2 fixed at 10.0.26100.9974 but Server 2025 at 10.0.26100.33822 on the same 26100 branch; both recorded as published.

## Documents

- [advisory] MSRC Security Update Guide: CVE-2026-88241 Windows Sensor Data Service Elevation of Privilege (vulnerability record) https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-88241
- [fix] MSRC Security Update Guide: CVE-2026-88241 affected products and fixing KBs (28 rows) https://api.msrc.microsoft.com/sug/v2.0/en-US/affectedProduct?%24filter=cveNumber%20eq%20%27CVE-2026-88241%27

## From the sources

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_