CVE-2026-112803

MediumCVSS 5.5/10Last modified Nov 12, 2026

Description

Improper access control in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-424CWE-284

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 12, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1128047.0Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.CVE-2026-1128058.8Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-1128064.7Insufficiently protected credentials in Windows Print Spooler Components allows an authorized attacker to disclose information locally.CVE-2026-1128076.5Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to deny service over a networCVE-2026-1128086.5Exposure of sensitive system information to an unauthorized control sphere in Windows Print Spooler Components allows an authorized attackerCVE-2026-1128095.5Improper access control in Windows Composite Image File System allows an authorized attacker to disclose information locally.CVE-2026-112815.0Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive iCVE-2026-1128107.0Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileCVE-2026-1128117.8Stack-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.CVE-2026-1128127.0Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.CVE-2026-1128134.7Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized aCVE-2026-1128145.5Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-112803: Medium severity, CVSS 5.5 | Vulnix