← Back to search

CVE-2026-105007

8.8 HIGH

Published 2026-10-13 · Updated 2026-10-16

AI risk analysis

Summary
The NDIS driver fails to validate buffer lengths before copying data, allowing attackers to write beyond allocated memory boundaries and potentially execute arbitrary code with elevated privileges.
Exploitability
Exploitation requires local access and a malicious application, making it moderately difficult but possible for attackers who already have user-level access to the system.
Blast radius
If exploited, this vulnerability could allow attackers to gain full system control from a local user account, potentially leading to widespread compromise of affected systems.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Apply the latest Windows Update KB5042817 which fixes the ndis.sys buffer validation issue in the Network Driver Interface Specification.
elevation-of-privilegekernelwindows

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker who successfully exploited this vulnerability could run processes in an elevated context. However, an attacker must first gain access to the local system with the ability to execute a malicious application in order to exploit this vulnerability. The security update addresses the vulnerability by changing how ndis.sys validates buffer length.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-125

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.