CVE-2026-119933

HighCVSS 7.8/10Last modified Nov 10, 2026

Description

Use of uninitialized resource in Windows NTFS allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-908

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1199348.8Double free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-1199356.8Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-1199365.9Integer underflow (wrap or wraparound) in Windows Internet Information Services allows an unauthorized attacker to deny service over a netwoCVE-2026-1199376.6Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges with a physical attack.CVE-2026-1199387.5Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.CVE-2026-1199397.8Improper privilege management in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.CVE-2026-119944.8Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permissiCVE-2026-1199406.5Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to deny service over a network.CVE-2026-1199417.8Untrusted pointer dereference in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges locally.CVE-2026-1199424.7Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose infCVE-2026-1199437.8Buffer over-read in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.CVE-2026-1199447.5Heap-based buffer overflow in Windows Mobile Device Management allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-119933: High severity, CVSS 7.8 | Vulnix