CVE-2026-113861

HighCVSS 7.5/10Last modified Nov 10, 2026

Description

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1138628.1Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.CVE-2026-1138638.8Heap-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to elevate privileges over an adjacent network.CVE-2026-1138646.4Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.CVE-2026-1138657.8Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.CVE-2026-1138665.9When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due tCVE-2026-1138679.1Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back iCVE-2026-1138685.3When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A maliciCVE-2026-1138695.4When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME messaCVE-2026-113879.8The SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escCVE-2026-1138708.8MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a useCVE-2026-1138727.5multer is a middleware for Node.js that handles multipart/form-data file uploads. In versions from 2.0.0 before 2.5.0, when multer is configCVE-2026-1138737.5SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that ex
CVE-2026-113861: High severity, CVSS 7.5 | Vulnix