CVE-2026-113750

HighCVSS 7.0/10Last modified Nov 10, 2026

Description

Heap-based buffer overflow in Windows Device Inventory allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1137517.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Fast FAT Driver allows an authorized CVE-2026-1137527.5Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.CVE-2026-1137538.2Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally.CVE-2026-1137544.7Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.CVE-2026-1137557.0Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.CVE-2026-1137565.3Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.CVE-2026-1137575.5Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.CVE-2026-1137587.8Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.CVE-2026-1137597.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-113768.8IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 thCVE-2026-1137608.8Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.CVE-2026-1137617.0Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privile
CVE-2026-113750: High severity, CVSS 7.0 | Vulnix