| CVE-2026-119851 | HIGH | 7.0 | Time-of-check time-of-use (toctou) race condition in Windows Storage Spaces Controller allows an authorized at… | 2026-11-10 |
| CVE-2026-119852 | MEDIUM | 6.7 | Missing authorization in Windows Installer allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119853 | HIGH | 7.8 | Untrusted search path in Windows Remote Access API allows an authorized attacker to elevate privileges locally… | 2026-11-10 |
| CVE-2026-119855 | MEDIUM | 5.5 | Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information lo… | 2026-11-10 |
| CVE-2026-119856 | MEDIUM | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authori… | 2026-11-10 |
| CVE-2026-119857 | MEDIUM | 5.5 | Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.… | 2026-11-10 |
| CVE-2026-119858 | HIGH | 7.5 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a net… | 2026-11-10 |
| CVE-2026-119859 | HIGH | 7.0 | Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privilege… | 2026-11-10 |
| CVE-2026-119860 | HIGH | 7.0 | Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privilege… | 2026-11-10 |
| CVE-2026-119861 | HIGH | 7.0 | Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to eleva… | 2026-11-10 |
| CVE-2026-119862 | HIGH | 8.8 | Out-of-bounds read in Windows Input System allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119865 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Install… | 2026-11-10 |
| CVE-2026-119866 | HIGH | 7.0 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges local… | 2026-11-10 |
| CVE-2026-119867 | MEDIUM | 5.3 | Improper verification of cryptographic signature in Windows Installer allows an unauthorized attacker to bypas… | 2026-11-10 |
| CVE-2026-119868 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel … | 2026-11-10 |
| CVE-2026-119869 | MEDIUM | 6.4 | Use after free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119870 | HIGH | 7.0 | Untrusted pointer dereference in Windows SMB Client allows an authorized attacker to elevate privileges locall… | 2026-11-10 |
| CVE-2026-119871 | MEDIUM | 6.4 | Use after free in Windows IP Translation Configuration Service allows an authorized attacker to elevate privil… | 2026-11-10 |
| CVE-2026-119872 | MEDIUM | 6.4 | Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a … | 2026-11-10 |
| CVE-2026-119873 | HIGH | 7.0 | Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119874 | HIGH | 7.0 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges local… | 2026-11-10 |
| CVE-2026-119875 | MEDIUM | 4.0 | Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose informa… | 2026-11-10 |
| CVE-2026-119876 | HIGH | 7.0 | Heap-based buffer overflow in Windows USB Scanner Driver allows an authorized attacker to elevate privileges l… | 2026-11-10 |
| CVE-2026-119880 | HIGH | 7.5 | Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code… | 2026-11-10 |
| CVE-2026-119881 | HIGH | 8.8 | Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to elevate priv… | 2026-11-10 |
| CVE-2026-119882 | MEDIUM | 5.3 | Exposure of sensitive system information to an unauthorized control sphere in Windows Remote Desktop Services … | 2026-11-10 |
| CVE-2026-119883 | LOW | 3.3 | Improper authorization in Data Deduplication allows an authorized attacker to bypass a security feature locall… | 2026-11-10 |
| CVE-2026-119884 | MEDIUM | 6.8 | Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a phys… | 2026-11-10 |
| CVE-2026-119885 | MEDIUM | 6.8 | Heap-based buffer overflow in Windows Storport Miniport Driver allows an unauthorized attacker to elevate priv… | 2026-11-10 |
| CVE-2026-119886 | HIGH | 7.8 | Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to ele… | 2026-11-10 |
| CVE-2026-119887 | MEDIUM | 6.5 | Use of uninitialized resource in Windows Installer allows an unauthorized attacker to disclose information ove… | 2026-11-10 |
| CVE-2026-119888 | HIGH | 7.0 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119889 | MEDIUM | 6.5 | Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a networ… | 2026-11-10 |
| CVE-2026-119890 | MEDIUM | 5.3 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network.… | 2026-11-10 |
| CVE-2026-119892 | HIGH | 7.8 | Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119893 | HIGH | 7.0 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio S… | 2026-11-10 |
| CVE-2026-119894 | HIGH | 7.0 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119895 | HIGH | 7.0 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119898 | HIGH | 7.0 | Null pointer dereference in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l… | 2026-11-10 |
| CVE-2026-119899 | HIGH | 7.8 | Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119900 | HIGH | 7.3 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119901 | MEDIUM | 6.4 | Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges lo… | 2026-11-10 |
| CVE-2026-119903 | HIGH | 7.8 | Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119904 | HIGH | 7.8 | Improper control of generation of code ('code injection') in Microsoft Windows Speech allows an authorized att… | 2026-11-10 |
| CVE-2026-119905 | MEDIUM | 4.9 | Improper input validation in Windows DNS allows an authorized attacker to perform spoofing over a network.… | 2026-11-10 |
| CVE-2026-119906 | HIGH | 7.8 | Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox … | 2026-11-10 |
| CVE-2026-119907 | HIGH | 7.8 | Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker… | 2026-11-10 |
| CVE-2026-119908 | HIGH | 8.8 | Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an unauthorized attacker to… | 2026-11-10 |
| CVE-2026-119909 | MEDIUM | 5.9 | Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to … | 2026-11-10 |
| CVE-2026-119910 | MEDIUM | 4.7 | Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to disclose … | 2026-11-10 |