---
id: "CVE-2026-112966"
page: "https://infrastack.ai/live/CVE-2026-112966"
kind: "vulnerability"
aliases: ["CVE-2026-112966"]
title: "Windows Security Account Manager: unauthenticated network attacker can deny service"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows Security Account Manager", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "windows", "windows-server"]
not_affected_if: []
published_at: "2026-11-10T19:18:46+00:00"
first_seen_at: "2026-11-10T19:24:34+00:00"
updated_at: "2026-11-10T19:45:10+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112966", "first_seen_at": "2026-11-10T19:24:34+00:00"}]
exploit_sources: []
---

# Windows Security Account Manager: unauthenticated network attacker can deny service

Link for people: https://infrastack.ai/live/CVE-2026-112966 (this .md is for agents)

Windows Security Account Manager, the component that stores local account data, consumes resources without limit. An unauthorized attacker on the network can make the service unavailable.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows Security Account Manager affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T19:24:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112966

## From the sources

Uncontrolled resource consumption in Windows Security Account Manager allows an unauthorized attacker to deny service over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_