CVE-2026-113752

HighCVSS 7.5/10Last modified Nov 10, 2026

Description

Use after free in Windows Print Spooler Components allows an unauthorized attacker to execute code over an adjacent network.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1137538.2Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally.CVE-2026-1137544.7Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.CVE-2026-1137557.0Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.CVE-2026-1137565.3Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.CVE-2026-1137575.5Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.CVE-2026-1137587.8Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.CVE-2026-1137597.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-113768.8IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 thCVE-2026-1137608.8Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.CVE-2026-1137617.0Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileCVE-2026-1137627.0Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-1137636.3Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized a
CVE-2026-113752: High severity, CVSS 7.5 | Vulnix