{"id":"CVE-2026-96062","kind":"vulnerability","aliases":["CVE-2026-96062"],"related":[],"title":"Windows Installer: heap overflow lets a local user gain higher privileges","description":"Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in Windows Installer lets an attacker who already has a local account raise their privileges. The sources give no further detail on the trigger or affected builds.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Windows Installer","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["infrastructure","windows","windows-installer"],"not_affected_if":[],"how_to_check":"Unknown until Microsoft's Security Update Guide entry for CVE-2026-96062 is readable. Check whether the November 2026 cumulative update for your Windows build is installed (winver or Get-HotFix) and compare it with the KB listed in the MSRC entry.","fix":null,"status":"open","published_at":"2026-11-10T19:22:04+00:00","first_seen_at":"2026-11-10T19:25:29+00:00","triaged_at":"2026-11-10T19:36:36+00:00","updated_at":"2026-11-10T19:57:09+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:36:36Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Installer: heap overflow lets a local user gain higher privileges","impact":"high","summary":"A heap-based buffer overflow in Windows Installer lets an attacker who already has a local account raise their privileges. The sources give no further detail on the trigger or affected builds.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","windows-installer"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated system privileges on the machine","analyst_note":"Check the Microsoft security update guide entry for CVE-2026-96062 for affected Windows builds, the fixed update, and any detection steps.","how_to_check":"- unknown","plain_action":"","product_name":"Windows Installer","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Windows machines where a user with a local account can reach Windows Installer. The sources do not list affected Windows builds or which installer paths are involved.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000656,"input_tokens":4488,"output_tokens":415,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the Microsoft security update guide entry for CVE-2026-96062 for affected Windows builds, the fixed update, and any detection steps.","search":"'-2026':13A,16A '-96062':14A,17A 'account':42B 'affect':56B 'allow':66C 'alreadi':38B 'attack':36B,69C 'author':68C 'base':28B,60C 'buffer':29B,61C 'build':57B 'cve':12A,15A 'detail':51B 'elev':71C 'gain':9A 'give':48B 'heap':3A,27B,59C 'heap-bas':26B,58C 'higher':10A 'infrastructur':20B 'instal':2A,24B,33B,65C 'installer':19A 'let':5A,34B 'local':7A,41B,73C 'overflow':4A,30B,62C 'privileg':11A,45B,72C 'rais':43B 'sourc':47B 'trigger':54B 'user':8A 'window':1A,21B,23B,32B,64C 'windows':18A 'windows-instal':22B","nicknames":[],"mitigations":[],"who_affected":"Windows machines where a user with a local account can reach Windows Installer. The sources do not list affected Windows builds or which installer paths are involved.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["installer","windowsinstaller"],"ptokens":["installer","windows"],"labels":["high","infrastructure","vendor","windows","windowsinstaller"],"campaign_type":null,"search_a":"'-2026':13A,16A '-96062':14A,17A 'cve':12A,15A 'gain':9A 'heap':3A 'higher':10A 'instal':2A 'installer':19A 'let':5A 'local':7A 'overflow':4A 'privileg':11A 'user':8A 'window':1A 'windows':18A","search_b":"'account':42B 'affect':56B 'alreadi':38B 'attack':36B 'base':28B 'buffer':29B 'build':57B 'detail':51B 'give':48B 'heap':27B 'heap-bas':26B 'infrastructur':20B 'instal':24B,33B 'let':34B 'local':41B 'overflow':30B 'privileg':45B 'rais':43B 'sourc':47B 'trigger':54B 'window':21B,23B,32B 'windows-instal':22B","search_c":"'allow':66C 'attack':69C 'author':68C 'base':60C 'buffer':61C 'elev':71C 'heap':59C 'heap-bas':58C 'instal':65C 'local':73C 'overflow':62C 'privileg':72C 'window':64C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:22:04+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96062","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96062","severity":null,"published_at":"2026-11-10T19:22:04+00:00","modified_at":"2026-11-10T19:22:04+00:00","first_seen_at":"2026-11-10T19:25:29+00:00","fetched_at":"2026-11-10T19:25:29+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-96062:2583","url":null,"severity":null,"published_at":"2026-11-10T19:57:09+00:00","modified_at":"2026-11-10T19:57:09+00:00","first_seen_at":"2026-11-10T19:57:09+00:00","fetched_at":"2026-11-10T19:57:09+00:00","note":"MSRC and NVD pages return no content to web-cli (JS-only/empty); no primary page read, so no fix, builds or KB known. Nothing verified. Revisit when MSRC is readable (Nov 2026 Patch Tuesday cumulative updates likely)."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}