{"id":"CVE-2026-119835","kind":"vulnerability","aliases":["CVE-2026-119835"],"related":[],"title":"Windows Smart Card: use-after-free lets local user gain higher privileges","description":"Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.","summary":"A memory bug in the Windows Smart Card component lets an attacker who already has a local account free memory and then reuse it. That lets them raise their privileges on the machine.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","smart-card","windows"],"not_affected_if":["no-local-untrusted-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:59+00:00","first_seen_at":"2026-11-10T19:24:58+00:00","triaged_at":"2026-11-10T19:51:48+00:00","updated_at":"2026-11-10T19:51:48+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:51:48Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Smart Card: use-after-free lets local user gain higher privileges","impact":"high","summary":"A memory bug in the Windows Smart Card component lets an attacker who already has a local account free memory and then reuse it. That lets them raise their privileges on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","smart-card"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains SYSTEM-level privileges on the machine","analyst_note":"Check Microsoft's security update guide entry for CVE-2026-119835 for affected builds, the fixed update, and whether smart card features must be enabled.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-untrusted-users"],"who_is_affected":"Affects Windows machines where the Smart Card component is in use, and an attacker needs an existing local account. The sources do not list affected Windows builds or whether smart card features must be enabled. Shared multi-user systems and servers with untrusted local users are the main concern.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000668,"input_tokens":4478,"output_tokens":441,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check Microsoft's security update guide entry for CVE-2026-119835 for affected builds, the fixed update, and whether smart card features must be enabled.","search":"'-119835':16A,19A '-2026':15A,18A 'account':42B 'allow':65C 'alreadi':38B 'attack':36B,68C 'author':67C 'bug':27B 'card':3A,23B,32B,64C 'compon':33B 'cve':14A,17A 'elev':70C 'free':7A,43B,60C 'gain':11A 'higher':12A 'infrastructur':20B 'let':8A,34B,50B 'local':9A,41B,72C 'machin':57B 'memori':26B,44B 'privileg':13A,54B,71C 'rais':52B 'reus':47B 'smart':2A,22B,31B,63C 'smart-card':21B 'use':5A,58C 'use-after-fre':4A 'user':10A 'window':1A,24B,30B,62C","nicknames":[],"mitigations":[],"who_affected":"Affects Windows machines where the Smart Card component is in use, and an attacker needs an existing local account. The sources do not list affected Windows builds or whether smart card features must be enabled. Shared multi-user systems and servers with untrusted local users are the main concern.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","smartcard","windows"],"campaign_type":null,"search_a":"'-119835':16A,19A '-2026':15A,18A 'card':3A 'cve':14A,17A 'free':7A 'gain':11A 'higher':12A 'let':8A 'local':9A 'privileg':13A 'smart':2A 'use':5A 'use-after-fre':4A 'user':10A 'window':1A","search_b":"'account':42B 'alreadi':38B 'attack':36B 'bug':27B 'card':23B,32B 'compon':33B 'free':43B 'infrastructur':20B 'let':34B,50B 'local':41B 'machin':57B 'memori':26B,44B 'privileg':54B 'rais':52B 'reus':47B 'smart':22B,31B 'smart-card':21B 'window':24B,30B","search_c":"'allow':65C 'attack':68C 'author':67C 'card':64C 'elev':70C 'free':60C 'local':72C 'privileg':71C 'smart':63C 'use':58C 'window':62C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:59+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119835","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119835","severity":null,"published_at":"2026-11-10T19:19:59+00:00","modified_at":"2026-11-10T19:19:59+00:00","first_seen_at":"2026-11-10T19:24:58+00:00","fetched_at":"2026-11-10T19:24:58+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}