CVE Watch10 de nov. de 2026

CVE-2026-105545

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading

CVSS

7.0

Alta

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-362 · CWE-415

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.

Referências oficiais

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105545

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-969697.0 ALT

—

——0Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.3h CVE-2026-961717.0 ALT

—

——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.3h CVE-2026-961587.0 ALT

—

——0Use of uninitialized resource in Microsoft ActiveX Installer Service allows an authorized attacker to elevate privileges locally.3h CVE-2026-961158.0 ALT

—

——0Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.3h CVE-2026-960887.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.3h CVE-2026-960757.0 ALT

—

——0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Feedback Hub allows an authorized attacker to elevate privileges locally.3h