CVE-2026-112978

HighCVSS 7.8/10Last modified Nov 10, 2026

Description

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1129795.5Weak authentication in Windows State Repository Service allows an authorized attacker to perform tampering locally.CVE-2026-112984.3Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass same origiCVE-2026-1129806.7Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.CVE-2026-1129817.8Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.CVE-2026-1129825.5Missing authentication for critical function in Microsoft Account allows an authorized attacker to perform tampering locally.CVE-2026-1129846.6Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.CVE-2026-1129857.5Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.CVE-2026-1129867.0No cwe for this issue in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.CVE-2026-1129877.0Integer overflow or wraparound in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.CVE-2026-1129885.5Untrusted pointer dereference in Desktop Window Manager allows an authorized attacker to elevate privileges locally.CVE-2026-1129897.0Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.CVE-2026-112996.5Integer overflow in Fonts in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from
CVE-2026-112978: High severity, CVSS 7.8 | Vulnix