---
id: "CVE-2026-112977"
page: "https://infrastack.ai/live/CVE-2026-112977"
kind: "vulnerability"
aliases: ["CVE-2026-112977"]
title: "Windows Deployment Services: privilege flaw lets an authorized user read data"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "wds", "windows", "windows-server"]
not_affected_if: ["wds-role-not-installed"]
published_at: "2026-11-10T19:18:49+00:00"
first_seen_at: "2026-11-10T19:24:36+00:00"
updated_at: "2026-11-10T20:02:07+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112977", "first_seen_at": "2026-11-10T19:24:36+00:00"}]
exploit_sources: []
---

# Windows Deployment Services: privilege flaw lets an authorized user read data

Link for people: https://infrastack.ai/live/CVE-2026-112977 (this .md is for agents)

Windows Deployment Services has an improper privilege management flaw that lets an attacker who already holds some access disclose information on the local machine. The sources give no further detail on what data is exposed.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the Windows Deployment Services role is installed on the server, for example with `Get-WindowsFeature WDS` in PowerShell.
- Compare the server's Windows build against Microsoft's security update guide for this CVE; the sources do not name affected builds.

## Timeline

- 2026-11-10T19:24:36+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112977

## From the sources

Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_