---
id: "CVE-2026-96085"
page: "https://infrastack.ai/live/CVE-2026-96085"
kind: "vulnerability"
aliases: ["CVE-2026-96085"]
title: "Windows Installer: heap overflow lets a local user gain higher privileges"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "local-privilege-escalation", "windows", "windows-installer"]
not_affected_if: []
published_at: "2026-11-10T19:22:07+00:00"
first_seen_at: "2026-11-10T19:25:30+00:00"
updated_at: "2026-11-10T19:48:32+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96085", "first_seen_at": "2026-11-10T19:25:30+00:00"}, {"source": "analyst", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96085", "first_seen_at": "2026-11-10T19:48:32+00:00", "cites": ["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96085"]}]
exploit_sources: []
---

# Windows Installer: heap overflow lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-96085 (this .md is for agents)

A heap-based buffer overflow (CWE-122) in Windows Installer lets a local user with low privileges gain SYSTEM on the machine. Microsoft rates it Important (CVSS 7.8), says it is not exploited or publicly disclosed, and marks exploitation as less likely. An official fix exists.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Open the MSRC Security Update Guide entry for CVE-2026-96085, find the KB for your Windows version, and compare with installed updates (Settings > Windows Update > Update history). Exact builds: unknown until the KB table is read.

## Fix

Install the November 2026 Microsoft security update for your Windows version (the KB number is not yet read from the advisory: unknown).

## Timeline

- 2026-11-10T19:25:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96085
- 2026-11-10T19:48:32+00:00 analyst https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96085 — MSRC entry confirmed via API summary (Important EoP, SYSTEM, not exploited, not disclosed, Exploitation Less Likely, official fix exists). The MSRC page is JS-only and the browser session died, so affected builds and KB numbers were NOT retrieved; nothing verified. Revisit with the KB table. X/search not used.

## Documents

- [advisory] MSRC: CVE-2026-96085 Windows Installer Elevation of Privilege https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96085

## From the sources

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_