{"id":"CVE-2026-95898","kind":"vulnerability","aliases":["CVE-2026-95898"],"related":[],"title":"Windows iSCSI: heap buffer overflow lets a local user gain higher privileges","description":"Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in the Windows iSCSI component lets an attacker who already has a local account raise their privileges. The sources give no further detail on the trigger or the affected Windows builds.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","iscsi","local-privilege-escalation","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:21:43+00:00","first_seen_at":"2026-11-10T19:25:23+00:00","triaged_at":"2026-11-10T19:38:20+00:00","updated_at":"2026-11-10T20:27:42+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-11-10T19:38:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows iSCSI: heap buffer overflow lets a local user gain higher privileges","impact":"high","summary":"A heap-based buffer overflow in the Windows iSCSI component lets an attacker who already has a local account raise their privileges. The sources give no further detail on the trigger or the affected Windows builds.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","iscsi"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains SYSTEM-level privileges on the machine","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-95898 for affected Windows builds, whether the iSCSI initiator or target service is needed, and the fixed KB.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000639,"input_tokens":4492,"output_tokens":379,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-95898 for affected Windows builds, whether the iSCSI initiator or target service is needed, and the fixed KB.","search":"'-2026':14A,17A '-95898':15A,18A 'account':45B 'affect':60B 'allow':71C 'alreadi':41B 'attack':39B,74C 'author':73C 'base':29B,65C 'buffer':4A,30B,66C 'build':62B 'compon':36B 'cve':13A,16A 'detail':54B 'elev':76C 'escal':24B 'gain':10A 'give':51B 'heap':3A,28B,64C 'heap-bas':27B,63C 'higher':11A 'infrastructur':19B 'iscsi':2A,20B,35B,70C 'let':6A,37B 'local':8A,22B,44B,78C 'local-privilege-escal':21B 'overflow':5A,31B,67C 'privileg':12A,23B,48B,77C 'rais':46B 'sourc':50B 'trigger':57B 'user':9A 'window':1A,25B,34B,61B,69C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","iscsi","localprivilegeescalation","windows"],"campaign_type":null,"search_a":"'-2026':14A,17A '-95898':15A,18A 'buffer':4A 'cve':13A,16A 'gain':10A 'heap':3A 'higher':11A 'iscsi':2A 'let':6A 'local':8A 'overflow':5A 'privileg':12A 'user':9A 'window':1A","search_b":"'account':45B 'affect':60B 'alreadi':41B 'attack':39B 'base':29B 'buffer':30B 'build':62B 'compon':36B 'detail':54B 'escal':24B 'give':51B 'heap':28B 'heap-bas':27B 'infrastructur':19B 'iscsi':20B,35B 'let':37B 'local':22B,44B 'local-privilege-escal':21B 'overflow':31B 'privileg':23B,48B 'rais':46B 'sourc':50B 'trigger':57B 'window':25B,34B,61B","search_c":"'allow':71C 'attack':74C 'author':73C 'base':65C 'buffer':66C 'elev':76C 'heap':64C 'heap-bas':63C 'iscsi':70C 'local':78C 'overflow':67C 'privileg':77C 'window':69C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:43+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95898","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95898","severity":null,"published_at":"2026-11-10T19:21:43+00:00","modified_at":"2026-11-10T19:21:43+00:00","first_seen_at":"2026-11-10T19:25:23+00:00","fetched_at":"2026-11-10T19:25:23+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95898:2660","url":null,"severity":null,"published_at":"2026-11-10T20:27:42+00:00","modified_at":"2026-11-10T20:27:42+00:00","first_seen_at":"2026-11-10T20:27:42+00:00","fetched_at":"2026-11-10T20:27:42+00:00","note":"Could not read the MSRC or NVD page (both returned empty through web-cli) and searches found no page for this CVE id. Affected builds, KB and whether the initiator or target service is involved are unknown. Settle by opening the Security Update Guide entry in a browser. Nothing verified, no documents linked, severity unchanged."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}