{"id":"CVE-2026-94514","kind":"vulnerability","aliases":["CVE-2026-94514"],"related":[],"title":"Windows Kernel: race condition lets a local user gain higher privileges","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.","summary":"A race condition in the Windows kernel lets an attacker who already has a local account raise their privileges. The sources give no further detail on the trigger or the affected Windows builds.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kernel","self-hosted","windows"],"not_affected_if":["unknown"],"how_to_check":"- Check the Windows build with `winver` and compare it against the update list in the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-94514)","fix":null,"status":"open","published_at":"2026-11-10T19:21:37+00:00","first_seen_at":"2026-11-10T19:25:21+00:00","triaged_at":"2026-11-10T19:49:59+00:00","updated_at":"2026-11-10T19:49:59+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:49:59Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Kernel: race condition lets a local user gain higher privileges","impact":"high","summary":"A race condition in the Windows kernel lets an attacker who already has a local account raise their privileges. The sources give no further detail on the trigger or the affected Windows builds.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","kernel","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains system-level privileges on the machine","analyst_note":"Find the affected Windows builds and the Microsoft security update that fixes CVE-2026-94514 in the MSRC advisory; the NVD entry gives no version data.","how_to_check":"- Check the Windows build with `winver` and compare it against the update list in the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-94514)\n- unknown for any further check, as the sources do not say","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Any machine running an affected Windows version where an authorized user can run code locally, such as shared workstations, terminal servers or build hosts. The sources do not list affected Windows builds, so the team should confirm the range with the vendor advisory. Machines where only trusted administrators log in carry less practical risk.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000713,"input_tokens":4503,"output_tokens":525,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the affected Windows builds and the Microsoft security update that fixes CVE-2026-94514 in the MSRC advisory; the NVD entry gives no version data.","search":"'-2026':13A,16A '-94514':14A,17A 'account':39B 'affect':54B 'allow':70C 'alreadi':35B 'attack':33B,73C 'author':72C 'build':56B 'concurr':57C 'condit':4A,26B,66C 'cve':12A,15A 'detail':48B 'elev':75C 'execut':58C 'gain':9A 'give':45B 'higher':10A 'host':22B 'improp':63C 'infrastructur':18B 'kernel':2A,19B,30B,69C 'let':5A,31B 'local':7A,38B,77C 'privileg':11A,42B,76C 'race':3A,25B,65C 'rais':40B 'resourc':61C 'self':21B 'self-host':20B 'share':60C 'sourc':44B 'synchron':64C 'trigger':51B 'use':59C 'user':8A 'window':1A,23B,29B,55B,68C","nicknames":[],"mitigations":[],"who_affected":"Any machine running an affected Windows version where an authorized user can run code locally, such as shared workstations, terminal servers or build hosts. The sources do not list affected Windows builds, so the team should confirm the range with the vendor advisory. Machines where only trusted administrators log in carry less practical risk.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","kernel","selfhosted","windows"],"campaign_type":null,"search_a":"'-2026':13A,16A '-94514':14A,17A 'condit':4A 'cve':12A,15A 'gain':9A 'higher':10A 'kernel':2A 'let':5A 'local':7A 'privileg':11A 'race':3A 'user':8A 'window':1A","search_b":"'account':39B 'affect':54B 'alreadi':35B 'attack':33B 'build':56B 'condit':26B 'detail':48B 'give':45B 'host':22B 'infrastructur':18B 'kernel':19B,30B 'let':31B 'local':38B 'privileg':42B 'race':25B 'rais':40B 'self':21B 'self-host':20B 'sourc':44B 'trigger':51B 'window':23B,29B,55B","search_c":"'allow':70C 'attack':73C 'author':72C 'concurr':57C 'condit':66C 'elev':75C 'execut':58C 'improp':63C 'kernel':69C 'local':77C 'privileg':76C 'race':65C 'resourc':61C 'share':60C 'synchron':64C 'use':59C 'window':68C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:37+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-94514","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94514","severity":null,"published_at":"2026-11-10T19:21:37+00:00","modified_at":"2026-11-10T19:21:37+00:00","first_seen_at":"2026-11-10T19:25:21+00:00","fetched_at":"2026-11-10T19:25:21+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}