{"id":"CVE-2026-96010","kind":"vulnerability","aliases":["CVE-2026-96010"],"related":[],"title":"HID Parser Library: integer underflow lets an authorized user gain privileges","description":"Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.","summary":"Microsoft lists an integer underflow in the HID Parser Library that lets an already-authorized user raise privileges (CVSS 8.8, network vector, low privileges required). The affected Windows builds and the fixing update are not yet confirmed from a readable source.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["hid-parser-library","infrastructure","microsoft","privilege-escalation","windows"],"not_affected_if":[],"how_to_check":"unknown: Microsoft's advisory for CVE-2026-96010 (MSRC Update Guide) lists affected builds and KBs; compare against installed Windows updates. Not yet read.","fix":null,"status":"open","published_at":"2026-11-10T19:21:57+00:00","first_seen_at":"2026-11-10T19:25:27+00:00","triaged_at":"2026-11-10T19:25:54+00:00","updated_at":"2026-11-10T20:10:07+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:25:54Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HID Parser Library: integer underflow lets an authorized user gain privileges","impact":"high","summary":"An integer underflow in the HID Parser Library lets an attacker who already has authorized access raise their privileges. The sources say the attack can be carried out over a network.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hid-parser-library"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"authorized attacker gains higher privileges over the network","analyst_note":"Identify the vendor and affected versions of the HID Parser Library from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-96010 and find the fixed release.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The sources do not name the affected products or versions, so the HID Parser Library version in use cannot be confirmed from this signal. Teams that ship or run software bundling this library should look for it in their dependencies and wait for the vendor's product data.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000666,"input_tokens":4500,"output_tokens":432,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the vendor and affected versions of the HID Parser Library from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-96010 and find the fixed release.","search":"'-2026':13A,16A '-96010':14A,17A '8.8':48B 'affect':55B 'allow':79C 'alreadi':42B 'already-author':41B 'attack':82C 'author':8A,43B,81C 'build':57B 'confirm':65B 'cve':12A,15A 'cvss':47B 'elev':84C 'escal':26B 'fix':60B 'gain':10A 'hid':1A,19B,35B,76C 'hid-parser-librari':18B 'infrastructur':22B 'integ':4A,31B,70C 'let':6A,39B 'librari':3A,21B,37B,78C 'list':29B 'low':51B 'microsoft':23B,28B 'network':49B,88C 'parser':2A,20B,36B,77C 'privileg':11A,25B,46B,52B,85C 'privilege-escal':24B 'rais':45B 'readabl':68B 'requir':53B 'sourc':69B 'underflow':5A,32B,71C 'updat':61B 'user':9A,44B 'vector':50B 'window':27B,56B 'wrap':72C 'wraparound':74C 'yet':64B","nicknames":[],"mitigations":[],"who_affected":"The sources do not name the affected products or versions, so the HID Parser Library version in use cannot be confirmed from this signal. Teams that ship or run software bundling this library should look for it in their dependencies and wait for the vendor's product data.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["hidparserlibrary","high","infrastructure","microsoft","privilegeescalation","windows"],"campaign_type":null,"search_a":"'-2026':13A,16A '-96010':14A,17A 'author':8A 'cve':12A,15A 'gain':10A 'hid':1A 'integ':4A 'let':6A 'librari':3A 'parser':2A 'privileg':11A 'underflow':5A 'user':9A","search_b":"'8.8':48B 'affect':55B 'alreadi':42B 'already-author':41B 'author':43B 'build':57B 'confirm':65B 'cvss':47B 'escal':26B 'fix':60B 'hid':19B,35B 'hid-parser-librari':18B 'infrastructur':22B 'integ':31B 'let':39B 'librari':21B,37B 'list':29B 'low':51B 'microsoft':23B,28B 'network':49B 'parser':20B,36B 'privileg':25B,46B,52B 'privilege-escal':24B 'rais':45B 'readabl':68B 'requir':53B 'sourc':69B 'underflow':32B 'updat':61B 'user':44B 'vector':50B 'window':27B,56B 'yet':64B","search_c":"'allow':79C 'attack':82C 'author':81C 'elev':84C 'hid':76C 'integ':70C 'librari':78C 'network':88C 'parser':77C 'privileg':85C 'underflow':71C 'wrap':72C 'wraparound':74C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:57+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96010","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96010","severity":null,"published_at":"2026-11-10T19:21:57+00:00","modified_at":"2026-11-10T19:21:57+00:00","first_seen_at":"2026-11-10T19:25:27+00:00","fetched_at":"2026-11-10T19:25:27+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-96010:2615","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96010","severity":null,"published_at":"2026-11-10T20:10:07+00:00","modified_at":"2026-11-10T20:10:07+00:00","first_seen_at":"2026-11-10T20:10:07+00:00","fetched_at":"2026-11-10T20:10:07+00:00","note":"NVD page unreadable via web-cli; MSRC page for this id not retrievable (JS). CNA is secure@microsoft.com, so likely the Windows HID Parser Library (a sibling CVE-2026-83569 has that MSRC title), but no source read gives versions or fix. Not verified. Revisit when MSRC/NVD data is available.","cites":["https://nvd.nist.gov/vuln/detail/CVE-2026-96010"]}],"documents":[{"id":117778,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96010","title":"NVD: CVE-2026-96010","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}