---
id: "CVE-2026-113772"
page: "https://infrastack.ai/live/CVE-2026-113772"
kind: "vulnerability"
aliases: ["CVE-2026-113772"]
title: "Windows: race condition in Redirected Drive Buffering leaks information locally"
severity: "medium"
cvss: 4.7
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["remote-desktop", "runtime", "terminal-server", "windows"]
not_affected_if: ["no-local-users", "no-redirected-drives"]
published_at: "2026-11-10T19:18:58+00:00"
first_seen_at: "2026-11-10T19:24:41+00:00"
updated_at: "2026-11-10T20:04:13+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113772", "first_seen_at": "2026-11-10T19:24:41+00:00"}]
exploit_sources: []
---

# Windows: race condition in Redirected Drive Buffering leaks information locally

Link for people: https://infrastack.ai/live/CVE-2026-113772 (this .md is for agents)

A time-of-check time-of-use race in the Windows Redirected Drive Buffering feature lets an authorized local user read information they should not see. The attacker needs an existing account on the machine and the flaw is only reachable locally.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:41+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113772

## From the sources

Time-of-check time-of-use (toctou) race condition in Windows Redirected Drive Buffering allows an authorized attacker to disclose information locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_