CVE-2026-105007

Name of the Vulnerable Software and Affected Versions Microsoft Windows (affected versions not specified)

Description An elevation of privilege issue exists in the Network Driver Interface Specification (NDIS) due to a failure in ndis.sys to verify buffer length before copying memory. A local attacker could execute a specially crafted application to run processes in an elevated context, provided they already have local system access to execute malicious code.

Recommendations Apply the security update that modifies how ndis.sys validates buffer length.