{"id":"CVE-2026-105565","aliases":[],"cve":{"records":[{"id":"CVE-2026-105565","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-05T16:02:13.156Z","published":"2026-11-10T18:19:53.390Z","modified":"2026-11-13T18:08:42.867Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-11-13T18:08:42.867Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-10T21:11:06.768Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105565","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-416","description":"CWE-416: Use After Free","source":"microsoft"},{"id":"CWE-822","description":"CWE-822: Untrusted Pointer Dereference","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*","versionStartIncluding":"10.0.26100.0","versionEndExcluding":"10.0.26100.9974"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*","versionStartIncluding":"10.0.26200.0","versionEndExcluding":"10.0.26200.9974"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.26300.0","versionEndExcluding":"10.0.26300.9974"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*","versionStartIncluding":"10.0.28000.0","versionEndExcluding":"10.0.28000.3501"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-10T21:02:50.742821Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Windows MIDI Service Module Elevation of Privileges Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.","score":7,"severity":"high","published":"2026-11-10T18:19:53.390Z","modified":"2026-11-13T18:08:42.867Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Windows 11 Version 24H2","platforms":["ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.9974","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-105565"},{"vendor":"Microsoft","name":"Windows 11 Version 25H2","platforms":["ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.26200.0","status":"affected","lessThan":"10.0.26200.9974","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-105565"},{"vendor":"Microsoft","name":"Windows 11 version 26H1","platforms":["ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.28000.0","status":"affected","lessThan":"10.0.28000.3501","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-105565"},{"vendor":"Microsoft","name":"Windows 11 Version 26H2","platforms":["ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.26300.0","status":"affected","lessThan":"10.0.26300.9974","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-105565"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105565"],"sources":[{"name":"CVE","id":"CVE-2026-105565","modified":"2026-11-13T18:08:42.867Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-105565"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":7}],"sourceAffected":[],"observedAt":"2026-11-13T18:21:21.790Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:00:33.317Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-12T07:40:53.172Z","attemptedAt":"2026-11-12T07:40:53.172Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-12T07:40:34.911Z","attemptedAt":"2026-11-12T07:40:34.911Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-12T07:40:35.079Z","attemptedAt":"2026-11-12T07:40:35.079Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-12T07:40:34.451Z","attemptedAt":"2026-11-12T07:40:34.451Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-5vpm-4gmp-vmgx","url":"https://github.com/advisories/GHSA-5vpm-4gmp-vmgx","modified":"2026-11-10T21:32:29Z","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-12T07:40:34.911Z"},{"source":"ENISA EUVD","id":"EUVD-2026-122047","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-122047","modified":"Nov 11, 2026, 5:15:18 PM","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","checkedAt":"2026-11-12T07:40:35.079Z"},{"source":"NVD","id":"CVE-2026-105565","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105565","modified":"2026-11-10T21:17:47.080","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-12T07:40:53.172Z"}],"aiSummary":{"text":"A use-after-free vulnerability in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally on Windows 11 versions 24H2, 25H2, 26H1, and 26H2. The affected versions are between 10.0.26100.0 and 10.0.26100.9974 for 24H2, 10.0.26200.0 and 10.0.26200.9974 for 25H2, 10.0.28000.0 and 10.0.28000.3501 for 26H1, and 10.0.26300.0 and 10.0.26300.9974 for 26H2.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-10T21:36:14.102Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-105565"}]}}