{"id":"CVE-2026-119837","kind":"vulnerability","aliases":["CVE-2026-119837"],"related":[],"title":"Windows UDF file system driver heap overflow lets a local user gain privileges","description":"Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in the Windows Universal Disk Format file system driver (UDFS) lets an attacker who already has authorized local access raise their privileges. The sources do not describe the exploit conditions beyond local privilege escalation.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:59+00:00","first_seen_at":"2026-11-10T19:24:58+00:00","triaged_at":"2026-11-10T19:44:35+00:00","updated_at":"2026-11-10T19:44:35+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:44:35Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows UDF file system driver heap overflow lets a local user gain privileges","impact":"high","summary":"A heap-based buffer overflow in the Windows Universal Disk Format file system driver (UDFS) lets an attacker who already has authorized local access raise their privileges. The sources do not describe the exploit conditions beyond local privilege escalation.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains system-level privileges on the machine","analyst_note":"Check the Microsoft security update guide for CVE-2026-119837 to find affected Windows builds and the patch.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Machines running Windows where a local user already has an account. The sources do not say which Windows versions or configurations are affected, and they name no product versions.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00065,"input_tokens":4512,"output_tokens":398,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the Microsoft security update guide for CVE-2026-119837 to find affected Windows builds and the patch.","search":"'-119837':16A,19A '-2026':15A,18A 'access':46B 'allow':76C 'alreadi':42B 'attack':40B,79C 'author':44B,78C 'base':25B,64C 'beyond':58B 'buffer':26B,65C 'condit':57B 'cve':14A,17A 'describ':54B 'disk':32B,70C 'driver':5A,36B,74C 'elev':81C 'escal':61B 'exploit':56B 'file':3A,34B,72C 'format':33B,71C 'gain':12A 'heap':6A,24B,63C 'heap-bas':23B,62C 'infrastructur':20B 'let':8A,38B 'local':10A,45B,59B,83C 'overflow':7A,27B,66C 'privileg':13A,49B,60B,82C 'rais':47B 'sourc':51B 'system':4A,35B,73C 'udf':2A,37B,75C 'univers':31B,69C 'user':11A 'window':1A,21B,30B,68C","nicknames":[],"mitigations":[],"who_affected":"Machines running Windows where a local user already has an account. The sources do not say which Windows versions or configurations are affected, and they name no product versions.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","windows"],"campaign_type":null,"search_a":"'-119837':16A,19A '-2026':15A,18A 'cve':14A,17A 'driver':5A 'file':3A 'gain':12A 'heap':6A 'let':8A 'local':10A 'overflow':7A 'privileg':13A 'system':4A 'udf':2A 'user':11A 'window':1A","search_b":"'access':46B 'alreadi':42B 'attack':40B 'author':44B 'base':25B 'beyond':58B 'buffer':26B 'condit':57B 'describ':54B 'disk':32B 'driver':36B 'escal':61B 'exploit':56B 'file':34B 'format':33B 'heap':24B 'heap-bas':23B 'infrastructur':20B 'let':38B 'local':45B,59B 'overflow':27B 'privileg':49B,60B 'rais':47B 'sourc':51B 'system':35B 'udf':37B 'univers':31B 'window':21B,30B","search_c":"'allow':76C 'attack':79C 'author':78C 'base':64C 'buffer':65C 'disk':70C 'driver':74C 'elev':81C 'file':72C 'format':71C 'heap':63C 'heap-bas':62C 'local':83C 'overflow':66C 'privileg':82C 'system':73C 'udf':75C 'univers':69C 'window':68C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:59+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119837","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119837","severity":null,"published_at":"2026-11-10T19:19:59+00:00","modified_at":"2026-11-10T19:20:00+00:00","first_seen_at":"2026-11-10T19:24:58+00:00","fetched_at":"2026-11-10T19:24:58+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}