| CVE-2026-119912 | MEDIUM | 6.7 | Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119913 | HIGH | 7.0 | Improper link resolution before file access ('link following') in Windows Print Spooler Components allows an a… | 2026-11-10 |
| CVE-2026-119914 | MEDIUM | 6.7 | Improper restriction of communication channel to intended endpoints in Windows Setup and Deployment allows an … | 2026-11-10 |
| CVE-2026-119916 | HIGH | 8.8 | Heap-based buffer overflow in Windows Input System allows an authorized attacker to elevate privileges locally… | 2026-11-10 |
| CVE-2026-119917 | HIGH | 7.8 | Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to ele… | 2026-11-10 |
| CVE-2026-119918 | MEDIUM | 6.8 | Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.… | 2026-11-10 |
| CVE-2026-119919 | HIGH | 7.0 | Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to ele… | 2026-11-10 |
| CVE-2026-119921 | HIGH | 7.0 | Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to ele… | 2026-11-10 |
| CVE-2026-119925 | HIGH | 8.8 | Out-of-bounds read in Windows Text Services Framework allows an authorized attacker to elevate privileges loca… | 2026-11-10 |
| CVE-2026-119928 | HIGH | 7.0 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119929 | HIGH | 7.8 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119931 | HIGH | 7.0 | Time-of-check time-of-use (toctou) race condition in Windows Text Services Framework allows an authorized atta… | 2026-11-10 |
| CVE-2026-119932 | HIGH | 7.5 | Null pointer dereference in Windows Remote Desktop allows an unauthorized attacker to deny service over a netw… | 2026-11-10 |
| CVE-2026-119933 | HIGH | 7.8 | Use of uninitialized resource in Windows NTFS allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119934 | HIGH | 8.8 | Double free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-119935 | MEDIUM | 6.8 | Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to elevate privileges… | 2026-11-10 |
| CVE-2026-119936 | MEDIUM | 5.9 | Integer underflow (wrap or wraparound) in Windows Internet Information Services allows an unauthorized attacke… | 2026-11-10 |
| CVE-2026-119937 | MEDIUM | 6.6 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-119938 | HIGH | 7.5 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-119939 | HIGH | 7.8 | Improper privilege management in Windows Print Spooler Components allows an authorized attacker to elevate pri… | 2026-11-10 |
| CVE-2026-119940 | MEDIUM | 6.5 | Integer overflow or wraparound in Windows Kerberos allows an authorized attacker to deny service over a networ… | 2026-11-10 |
| CVE-2026-119941 | HIGH | 7.8 | Untrusted pointer dereference in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privile… | 2026-11-10 |
| CVE-2026-119942 | MEDIUM | 4.7 | Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an autho… | 2026-11-10 |
| CVE-2026-119943 | HIGH | 7.8 | Buffer over-read in Microsoft Windows Search Component allows an authorized attacker to elevate privileges loc… | 2026-11-10 |
| CVE-2026-119944 | HIGH | 7.5 | Heap-based buffer overflow in Windows Mobile Device Management allows an unauthorized attacker to elevate priv… | 2026-11-10 |
| CVE-2026-119945 | HIGH | 8.1 | Use after free in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over … | 2026-11-10 |
| CVE-2026-119946 | MEDIUM | 5.9 | Improper access control in Windows HTTP.sys allows an unauthorized attacker to disclose information over a net… | 2026-11-10 |
| CVE-2026-119947 | HIGH | 7.5 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119948 | HIGH | 7.5 | Stack-based buffer overflow in Windows Active Directory allows an authorized attacker to execute code over a n… | 2026-11-10 |
| CVE-2026-119950 | HIGH | 8.8 | Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to elevate priv… | 2026-11-10 |
| CVE-2026-119951 | HIGH | 8.1 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-119952 | HIGH | 8.1 | Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a netwo… | 2026-11-10 |
| CVE-2026-119953 | HIGH | 7.8 | Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119954 | HIGH | 7.8 | Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privile… | 2026-11-10 |
| CVE-2026-119955 | MEDIUM | 6.0 | Uncontrolled resource consumption in Windows Hyper-V allows an authorized attacker to deny service locally.… | 2026-11-10 |
| CVE-2026-119957 | HIGH | 7.8 | Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119958 | CRITICAL | 9.8 | Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to… | 2026-11-10 |
| CVE-2026-119959 | MEDIUM | 5.3 | Improper access control in Windows Hyper-V allows an authorized attacker to perform spoofing locally.… | 2026-11-10 |
| CVE-2026-119960 | HIGH | 7.5 | Use of uninitialized resource in Windows Hyper-V allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119961 | HIGH | 8.1 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Interne… | 2026-11-10 |
| CVE-2026-119962 | HIGH | 8.1 | Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network… | 2026-11-10 |
| CVE-2026-119963 | HIGH | 8.1 | Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-119964 | HIGH | 8.1 | Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-119965 | MEDIUM | 6.4 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.… | 2026-11-10 |
| CVE-2026-119966 | HIGH | 7.5 | Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges … | 2026-11-10 |
| CVE-2026-119967 | HIGH | 8.1 | Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a… | 2026-11-10 |
| CVE-2026-119969 | HIGH | 8.8 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.… | 2026-11-10 |
| CVE-2026-119970 | MEDIUM | 4.9 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.… | 2026-11-10 |
| CVE-2026-119971 | MEDIUM | 4.9 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.… | 2026-11-10 |
| CVE-2026-119972 | MEDIUM | 5.9 | Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny ser… | 2026-11-10 |