Untrusted Pointer Dereference in Microsoft Windows - CVE-2026-113761
Published: November 11, 2026
Vulnerability identifier: #VU164927
CSH Severity: Low
CVSS v4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-113761
CWE-ID: CWE-822
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges to SYSTEM.
The vulnerability exists due to untrusted pointer dereference in the Windows Container Isolation FS Filter Driver (unionfs.sys) when accessing memory through an untrusted pointer. A local user can exploit the pointer dereference to gain SYSTEM privileges.
Successful exploitation requires winning a race condition.
Affected software
Microsoft Windows
How to mitigate CVE-2026-113761
Install security update from vendor's website.
Microsoft Windows - update to 11 26H1 10.0.28000.3501