{"id":"CVE-2026-116928","kind":"vulnerability","aliases":["CVE-2026-116928"],"related":[],"title":"Windows Search Component: out-of-bounds write lets a network attacker run code","description":"Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.","summary":"A memory-corruption bug in the Microsoft Windows Search Component lets an unauthorized attacker write past a buffer. The sources say this allows code execution over a network.","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Microsoft Windows Search","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["infrastructure","microsoft","rce","windows","windows-search"],"not_affected_if":[],"how_to_check":"unknown: MSRC has not been readable yet. Once the update guide lists KBs, compare the installed build (winver, or Get-HotFix) against the fixed build. Windows Search service (WSearch) status: Get-Service WSearch.","fix":null,"status":"open","published_at":"2026-11-10T19:19:21+00:00","first_seen_at":"2026-11-10T19:24:46+00:00","triaged_at":"2026-11-10T19:25:42+00:00","updated_at":"2026-11-10T19:32:56+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:25:42Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Search Component: out-of-bounds write lets a network attacker run code","impact":"high","summary":"A memory-corruption bug in the Microsoft Windows Search Component lets an unauthorized attacker write past a buffer. The sources say this allows code execution over a network.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","windows-search"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"code runs on the Windows machine via network attack","analyst_note":"Find the affected Windows builds and Microsoft's security update guidance for CVE-2026-116928 on msrc.microsoft.com; sources give no versions or fix.","how_to_check":"- unknown","plain_action":"","product_name":"Microsoft Windows Search","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000641,"input_tokens":4497,"output_tokens":383,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the affected Windows builds and Microsoft's security update guidance for CVE-2026-116928 on msrc.microsoft.com; sources give no versions or fix.","search":"'-116928':17A,20A '-2026':16A,19A 'allow':54B,70C 'attack':12A,45B,73C 'bound':7A,63C 'buffer':49B 'bug':35B 'code':14A,55B,76C 'compon':3A,41B,69C 'corrupt':34B 'cve':15A,18A 'execut':56B,75C 'infrastructur':24B 'let':9A,42B 'memori':33B 'memory-corrupt':32B 'microsoft':21A,25B,38B,66C 'network':11A,59B,79C 'out-of-bound':4A,60C 'past':47B 'rce':26B 'run':13A 'say':52B 'search':2A,23A,30B,40B,68C 'sourc':51B 'unauthor':44B,72C 'window':1A,27B,29B,39B,67C 'windows':22A 'windows-search':28B 'write':8A,46B,64C","nicknames":[],"mitigations":[],"who_affected":"Microsoft rates this critical (CVSS 9.8, network, no authentication, no user interaction) for the Windows Search Component. Affected Windows builds are not yet confirmed from Microsoft's page. Windows hosts with Search enabled are the ones to look at first; no source yet says who can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["microsoftwindowssearch","windowssearch"],"ptokens":["microsoft","search","windows"],"labels":["critical","infrastructure","microsoft","rce","vendor","windows","windowssearch"],"campaign_type":null,"search_a":"'-116928':17A,20A '-2026':16A,19A 'attack':12A 'bound':7A 'code':14A 'compon':3A 'cve':15A,18A 'let':9A 'microsoft':21A 'network':11A 'out-of-bound':4A 'run':13A 'search':2A,23A 'window':1A 'windows':22A 'write':8A","search_b":"'allow':54B 'attack':45B 'buffer':49B 'bug':35B 'code':55B 'compon':41B 'corrupt':34B 'execut':56B 'infrastructur':24B 'let':42B 'memori':33B 'memory-corrupt':32B 'microsoft':25B,38B 'network':59B 'past':47B 'rce':26B 'say':52B 'search':30B,40B 'sourc':51B 'unauthor':44B 'window':27B,29B,39B 'windows-search':28B 'write':46B","search_c":"'allow':70C 'attack':73C 'bound':63C 'code':76C 'compon':69C 'execut':75C 'microsoft':66C 'network':79C 'out-of-bound':60C 'search':68C 'unauthor':72C 'window':67C 'write':64C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116928","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116928","severity":null,"published_at":"2026-11-10T19:19:21+00:00","modified_at":"2026-11-10T19:19:21+00:00","first_seen_at":"2026-11-10T19:24:46+00:00","fetched_at":"2026-11-10T19:24:46+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-116928:2522","url":null,"severity":null,"published_at":"2026-11-10T19:32:56+00:00","modified_at":"2026-11-10T19:32:56+00:00","first_seen_at":"2026-11-10T19:32:56+00:00","fetched_at":"2026-11-10T19:32:56+00:00","note":"MSRC page is JS-only (empty via web-cli); no build list, fix or KB found in NVD or searches published hours ago. Nothing verified. Revisit once MSRC lists builds."}],"documents":[{"id":118745,"url":"https://news.ycombinator.com/item?id=50446357","title":"Windows Search RCE Vulnerability","kind":"post","source":"hackernews","publisher":null,"text":"Windows Search RCE Vulnerability\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116928\n\n2 points, 0 comments on Hacker News","published_at":"2026-11-10T21:10:27+00:00","relation":"discussion","confidence":null,"note":"2 points, 0 comments"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}