{"id":"CVE-2026-96103","kind":"vulnerability","aliases":["CVE-2026-96103"],"related":[],"title":"Windows Desktop Window Manager: heap overflow lets a local user gain system rights","description":"Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in Windows Desktop Window Manager lets a logged-in user with some access raise their privileges on the machine. The sources give no further detail on the trigger or affected builds.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Desktop Window Manager","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["dwm","heap-overflow","infrastructure","local-privilege-escalation","windows"],"not_affected_if":["no-local-users"],"how_to_check":"Unknown until Microsoft's advisory lists affected builds and the KB. Meanwhile check Windows Update history and the MSRC Update Guide entry for CVE-2026-96103.","fix":null,"status":"open","published_at":"2026-11-10T19:22:08+00:00","first_seen_at":"2026-11-10T19:25:30+00:00","triaged_at":"2026-11-10T19:36:29+00:00","updated_at":"2026-11-10T19:48:18+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-11-10T19:36:29Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Desktop Window Manager: heap overflow lets a local user gain system rights","impact":"high","summary":"A heap-based buffer overflow in Windows Desktop Window Manager lets a logged-in user with some access raise their privileges on the machine. The sources give no further detail on the trigger or affected builds.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains SYSTEM-level privileges on the machine","analyst_note":"Find the Microsoft advisory for CVE-2026-96103 at the NVD page to confirm affected Windows builds, fixed update and whether a patch is available.","how_to_check":"- unknown","plain_action":"","product_name":"Desktop Window Manager","needs_analyst":true,"not_affected_if":["no-local-users"],"who_is_affected":"Desktop Window Manager is the core Windows component that composes the desktop, so any Windows machine could be in scope, but the sources do not list affected versions. Systems with no untrusted local users are lower risk. The sources do not say which builds are affected.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000687,"input_tokens":4494,"output_tokens":475,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the Microsoft advisory for CVE-2026-96103 at the NVD page to confirm affected Windows builds, fixed update and whether a patch is available.","search":"'-2026':15A,18A '-96103':16A,19A 'access':52B 'affect':69B 'allow':80C 'attack':83C 'author':82C 'base':36B,73C 'buffer':37B,74C 'build':70B 'cve':14A,17A 'desktop':2A,20A,41B,77C 'detail':64B 'dwm':23B 'elev':85C 'escal':31B 'gain':11A 'give':61B 'heap':5A,25B,35B,72C 'heap-bas':34B,71C 'heap-overflow':24B 'infrastructur':27B 'let':7A,44B 'local':9A,29B,87C 'local-privilege-escal':28B 'log':47B 'logged-in':46B 'machin':58B 'manag':4A,43B,79C 'manager':22A 'overflow':6A,26B,38B,75C 'privileg':30B,55B,86C 'rais':53B 'right':13A 'sourc':60B 'system':12A 'trigger':67B 'user':10A,49B 'window':1A,3A,21A,32B,40B,42B,78C","nicknames":[],"mitigations":[],"who_affected":"Desktop Window Manager is the core Windows component that composes the desktop, so any Windows machine could be in scope, but the sources do not list affected versions. Systems with no untrusted local users are lower risk. The sources do not say which builds are affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["desktopwindowmanager","windowmanager"],"ptokens":["desktop","manager","window"],"labels":["dwm","heapoverflow","high","infrastructure","localprivilegeescalation","vendor","windows"],"campaign_type":null,"search_a":"'-2026':15A,18A '-96103':16A,19A 'cve':14A,17A 'desktop':2A,20A 'gain':11A 'heap':5A 'let':7A 'local':9A 'manag':4A 'manager':22A 'overflow':6A 'right':13A 'system':12A 'user':10A 'window':1A,3A,21A","search_b":"'access':52B 'affect':69B 'base':36B 'buffer':37B 'build':70B 'desktop':41B 'detail':64B 'dwm':23B 'escal':31B 'give':61B 'heap':25B,35B 'heap-bas':34B 'heap-overflow':24B 'infrastructur':27B 'let':44B 'local':29B 'local-privilege-escal':28B 'log':47B 'logged-in':46B 'machin':58B 'manag':43B 'overflow':26B,38B 'privileg':30B,55B 'rais':53B 'sourc':60B 'trigger':67B 'user':49B 'window':32B,40B,42B","search_c":"'allow':80C 'attack':83C 'author':82C 'base':73C 'buffer':74C 'desktop':77C 'elev':85C 'heap':72C 'heap-bas':71C 'local':87C 'manag':79C 'overflow':75C 'privileg':86C 'window':78C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:22:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96103","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96103","severity":null,"published_at":"2026-11-10T19:22:08+00:00","modified_at":"2026-11-10T19:22:08+00:00","first_seen_at":"2026-11-10T19:25:30+00:00","fetched_at":"2026-11-10T19:25:30+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-96103:2553","url":null,"severity":null,"published_at":"2026-11-10T19:48:18+00:00","modified_at":"2026-11-10T19:48:18+00:00","first_seen_at":"2026-11-10T19:48:18+00:00","fetched_at":"2026-11-10T19:48:18+00:00","note":"Could not read MSRC or NVD page content (empty), search found no page for this id; affected builds and KB unknown. Left fix unknown, nothing verified."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}