CVE-2026-113817

Опубликовано: 10 нояб. 2026

Источник: msrc

CVSS3: 6.6

Описание

Windows Devices Human Interface Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack.

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Продукт	Статья	Обновление
Windows 10 Version 1607 for 32-bit Systems	5131291	Security Update
Windows 10 Version 1607 for x64-based Systems	5131291	Security Update
Windows 10 Version 1809 for 32-bit Systems	5131085	Security Update
Windows 10 Version 1809 for x64-based Systems	5131085	Security Update
Windows 10 Version 21H2 for 32-bit Systems	5131096	Security Update
Windows 10 Version 21H2 for ARM64-based Systems	5131096	Security Update
Windows 10 Version 21H2 for x64-based Systems	5131096	Security Update
Windows 10 Version 22H2 for x64-based Systems	5131096	Security Update
Windows 10 Version 22H2 for ARM64-based Systems	5131096	Security Update
Windows 10 Version 22H2 for 32-bit Systems	5131096	Security Update

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

6.6 Medium

CVSS3

CVE-2026-113817

CVSS3: 6.6

nvd

3 дня назад

Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack.

GHSA-fchm-cr2x-85m5

CVSS3: 6.6

github

2 дня назад

Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack.

6.6 Medium

CVSS3