{"id":"CVE-2026-119825","kind":"vulnerability","aliases":["CVE-2026-119825"],"related":[],"title":"Windows Win32K: uninitialized memory lets a local user read data","description":"Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.","summary":"Windows Win32K, the kernel graphics driver, reads a resource it never initialized, so an authorized local user can see memory contents they should not. The sources give no further detail on what data leaks.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","win32k","windows"],"not_affected_if":["no-local-users"],"how_to_check":"- Check the Windows build with `winver` and compare it to the Microsoft security update guide entry for CVE-2026-119825","fix":null,"status":"open","published_at":"2026-11-10T19:19:57+00:00","first_seen_at":"2026-11-10T19:24:57+00:00","triaged_at":"2026-11-10T20:00:41+00:00","updated_at":"2026-11-10T20:00:41+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:00:41Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Win32K: uninitialized memory lets a local user read data","impact":"low","summary":"Windows Win32K, the kernel graphics driver, reads a resource it never initialized, so an authorized local user can see memory contents they should not. The sources give no further detail on what data leaks.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","win32k"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user reads kernel memory contents, possibly sensitive data","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-119825 for affected builds and the patch KB.","how_to_check":"- Check the Windows build with `winver` and compare it to the Microsoft security update guide entry for CVE-2026-119825\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-users"],"who_is_affected":"Affects Windows systems where an authorized user can run code locally. The sources do not name the affected Windows versions or builds, so the exact exposure is unknown. Machines with no local, non-administrative users have less exposure.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000679,"input_tokens":4485,"output_tokens":462,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119825':13A,16A '-2026':12A,15A 'allow':61C 'attack':64C 'author':34B,63C 'content':40B 'cve':11A,14A 'data':10A,52B 'detail':49B 'disclos':66C 'driver':25B 'give':46B 'graphic':24B 'inform':67C 'infrastructur':17B 'initi':31B 'kernel':23B 'leak':53B 'let':5A 'local':7A,35B,68C 'memori':4A,39B 'never':30B 'read':9A,26B 'resourc':28B,57C 'see':38B 'sourc':45B 'uniniti':3A,56C 'use':54C 'user':8A,36B 'win32k':2A,18B,21B,60C 'window':1A,19B,20B,59C","nicknames":[],"mitigations":[],"who_affected":"Affects Windows systems where an authorized user can run code locally. The sources do not name the affected Windows versions or builds, so the exact exposure is unknown. Machines with no local, non-administrative users have less exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","win32k","windows"],"campaign_type":null,"search_a":"'-119825':13A,16A '-2026':12A,15A 'cve':11A,14A 'data':10A 'let':5A 'local':7A 'memori':4A 'read':9A 'uniniti':3A 'user':8A 'win32k':2A 'window':1A","search_b":"'author':34B 'content':40B 'data':52B 'detail':49B 'driver':25B 'give':46B 'graphic':24B 'infrastructur':17B 'initi':31B 'kernel':23B 'leak':53B 'local':35B 'memori':39B 'never':30B 'read':26B 'resourc':28B 'see':38B 'sourc':45B 'user':36B 'win32k':18B,21B 'window':19B,20B","search_c":"'allow':61C 'attack':64C 'author':63C 'disclos':66C 'inform':67C 'local':68C 'resourc':57C 'uniniti':56C 'use':54C 'win32k':60C 'window':59C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:57+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119825","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119825","severity":null,"published_at":"2026-11-10T19:19:57+00:00","modified_at":"2026-11-10T19:19:57+00:00","first_seen_at":"2026-11-10T19:24:57+00:00","fetched_at":"2026-11-10T19:24:57+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}