CVE-2026-105507

HighCVSS 7.8/10Last modified Nov 10, 2026

Description

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Nov 10, 2026
Last modified: Nov 10, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-1055097.0Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.CVE-2026-105516.1The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) due to a predictable repla CVE-2026-1055107.0Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.CVE-2026-1055117.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Point-to-Point Protocol over Ethernet CVE-2026-1055127.5Integer underflow (wrap or wraparound) in Microsoft QUIC allows an unauthorized attacker to deny service over a network.CVE-2026-1055137.0An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully ex CVE-2026-1055157.5Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network.CVE-2026-1055188.8Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.CVE-2026-105524.3The Blue Captcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 2.0.1. This is due to miss CVE-2026-1055207.2Improper link resolution before file access ('link following') in Windows DNS allows an authorized attacker to elevate privileges over a net CVE-2026-1055227.0Use after free in Winlogon allows an authorized attacker to elevate privileges locally.CVE-2026-1055247.8Weak authentication in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.