CVE-2026-112800

HighCVSS 7.0/10Last modified Nov 10, 2026

Description

Heap-based buffer overflow in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1128017.8Insufficiently protected credentials in Windows eSCL Scanner allows an authorized attacker to elevate privileges locally.CVE-2026-1128027.8Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-1128035.5Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.CVE-2026-1128047.0Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.CVE-2026-1128058.8Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-1128064.7Insufficiently protected credentials in Windows Print Spooler Components allows an authorized attacker to disclose information locally.CVE-2026-1128076.5Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to deny service over a networCVE-2026-1128086.5Exposure of sensitive system information to an unauthorized control sphere in Windows Print Spooler Components allows an authorized attackerCVE-2026-1128095.5Improper access control in Windows Composite Image File System allows an authorized attacker to disclose information locally.CVE-2026-112815.0Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive iCVE-2026-1128107.0Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileCVE-2026-1128117.8Stack-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-112800: High severity, CVSS 7.0 | Vulnix