---
id: "CVE-2026-119383"
page: "https://infrastack.ai/live/CVE-2026-119383"
kind: "vulnerability"
aliases: ["CVE-2026-119383"]
title: "Windows Smart Card flaw lets local user with physical access gain higher privileges"
severity: "medium"
cvss: 6.6
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows Smart Card", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "smart-card", "windows"]
not_affected_if: ["no-smart-card-use", "no-untrusted-local-users"]
published_at: "2026-11-10T19:19:52+00:00"
first_seen_at: "2026-11-10T19:24:56+00:00"
updated_at: "2026-11-10T19:56:00+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119383", "first_seen_at": "2026-11-10T19:24:56+00:00"}]
exploit_sources: []
---

# Windows Smart Card flaw lets local user with physical access gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-119383 (this .md is for agents)

Windows Smart Card components read an uninitialized resource, which can be abused to elevate privileges. An attacker who already has an authorized account and physical access to the machine can gain higher privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows Smart Card affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T19:24:56+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119383

## From the sources

Use of uninitialized resource in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_