CVE-2026-113756

MediumCVSS 5.3/10Last modified Nov 11, 2026

Description

Improper access control in Windows FileCrypt Driver allows an authorized attacker to bypass a security feature over a network.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-424

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1137575.5Improper access control in Windows FileCrypt Driver allows an authorized attacker to disclose information locally.CVE-2026-1137587.8Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.CVE-2026-1137597.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-113768.8IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 thCVE-2026-1137608.8Heap-based buffer overflow in Windows XWizard Framework allows an authorized attacker to elevate privileges locally.CVE-2026-1137617.0Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileCVE-2026-1137627.0Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-1137636.3Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized aCVE-2026-1137644.7Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to disclose information locCVE-2026-1137657.8Heap-based buffer overflow in Windows File Server Resource Management Service allows an authorized attacker to elevate privileges locally.CVE-2026-1137663.3Weak authentication in Windows Language Experience Service allows an authorized attacker to perform tampering locally.CVE-2026-1137677.8Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privi
CVE-2026-113756: Medium severity, CVSS 5.3 | Vulnix