{"id":"CVE-2026-119827","kind":"vulnerability","aliases":["CVE-2026-119827"],"related":[],"title":"Windows Win32K: authorized local user can gain higher privileges","description":"Missing authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.","summary":"Microsoft Windows' Win32K kernel component is missing an authorization check. A user who already has a local account on the machine can elevate their privileges, which can lead to full control of that system.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":["no-local-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:57+00:00","first_seen_at":"2026-11-10T19:24:58+00:00","triaged_at":"2026-11-10T19:51:50+00:00","updated_at":"2026-11-10T19:51:50+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:51:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Win32K: authorized local user can gain higher privileges","impact":"high","summary":"Microsoft Windows' Win32K kernel component is missing an authorization check. A user who already has a local account on the machine can elevate their privileges, which can lead to full control of that system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated system privileges","analyst_note":"Find the affected Windows builds and the Microsoft security update that fixes CVE-2026-119827 in the MSRC advisory.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-users"],"who_is_affected":"Windows systems with Win32K are exposed to any authorized local user. Exposure requires local logon access, so systems with few or trusted local users carry less practical risk. The sources do not name affected Windows builds.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000648,"input_tokens":4480,"output_tokens":399,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the affected Windows builds and the Microsoft security update that fixes CVE-2026-119827 in the MSRC advisory.","search":"'-119827':12A,15A '-2026':11A,14A 'account':35B 'allow':57C 'alreadi':31B 'attack':60C 'author':3A,26B,53C,59C 'check':27B 'compon':22B 'control':48B 'cve':10A,13A 'elev':40B,62C 'full':47B 'gain':7A 'higher':8A 'infrastructur':16B 'kernel':21B 'lead':45B 'local':4A,34B,64C 'machin':38B 'microsoft':18B 'miss':24B,52C 'privileg':9A,42B,63C 'system':51B 'user':5A,29B 'win32k':2A,20B,56C 'window':1A,17B,19B,55C","nicknames":[],"mitigations":[],"who_affected":"Windows systems with Win32K are exposed to any authorized local user. Exposure requires local logon access, so systems with few or trusted local users carry less practical risk. The sources do not name affected Windows builds.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","windows"],"campaign_type":null,"search_a":"'-119827':12A,15A '-2026':11A,14A 'author':3A 'cve':10A,13A 'gain':7A 'higher':8A 'local':4A 'privileg':9A 'user':5A 'win32k':2A 'window':1A","search_b":"'account':35B 'alreadi':31B 'author':26B 'check':27B 'compon':22B 'control':48B 'elev':40B 'full':47B 'infrastructur':16B 'kernel':21B 'lead':45B 'local':34B 'machin':38B 'microsoft':18B 'miss':24B 'privileg':42B 'system':51B 'user':29B 'win32k':20B 'window':17B,19B","search_c":"'allow':57C 'attack':60C 'author':53C,59C 'elev':62C 'local':64C 'miss':52C 'privileg':63C 'win32k':56C 'window':55C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:57+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119827","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119827","severity":null,"published_at":"2026-11-10T19:19:57+00:00","modified_at":"2026-11-10T19:19:58+00:00","first_seen_at":"2026-11-10T19:24:58+00:00","fetched_at":"2026-11-10T19:24:58+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}