{"id":"CVE-2026-119840","kind":"vulnerability","aliases":["CVE-2026-119840"],"related":[],"title":"Windows UDF file system driver heap overflow lets local users gain privileges","description":"Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in the Windows Universal Disk Format file system driver (UDFS) can be triggered by an authorized local user. The sources say an attacker can elevate privileges on the machine.","severity":"medium","cvss":6.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:01+00:00","first_seen_at":"2026-11-10T19:24:58+00:00","triaged_at":"2026-11-10T19:58:23+00:00","updated_at":"2026-11-10T19:58:23+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:58:23Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows UDF file system driver heap overflow lets local users gain privileges","impact":"high","summary":"A heap-based buffer overflow in the Windows Universal Disk Format file system driver (UDFS) can be triggered by an authorized local user. The sources say an attacker can elevate privileges on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains higher privileges on the Windows machine","analyst_note":"Check the Microsoft Security Update Guide for CVE-2026-119840: affected Windows builds, patch, and any mitigation.","how_to_check":"- unknown","plain_action":"","product_name":"Windows UDFS driver","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Affected systems are Windows machines with the UDFS driver, which handles UDF-formatted disks and images. The attacker must already have an account on the machine. The sources do not give affected Windows versions or a patch.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000675,"input_tokens":4513,"output_tokens":448,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119840':15A,18A '-2026':14A,17A 'allow':70C 'attack':49B,73C 'author':42B,72C 'base':24B,58C 'buffer':25B,59C 'cve':13A,16A 'disk':31B,64C 'driver':5A,35B,68C 'elev':51B,75C 'file':3A,33B,66C 'format':32B,65C 'gain':11A 'heap':6A,23B,57C 'heap-bas':22B,56C 'infrastructur':19B 'let':8A 'local':9A,43B,77C 'machin':55B 'overflow':7A,26B,60C 'privileg':12A,52B,76C 'say':47B 'sourc':46B 'system':4A,34B,67C 'trigger':39B 'udf':2A,36B,69C 'univers':30B,63C 'user':10A,44B 'window':1A,20B,29B,62C","nicknames":[],"mitigations":[],"who_affected":"Affected systems are Windows machines with the UDFS driver, which handles UDF-formatted disks and images. The attacker must already have an account on the machine. The sources do not give affected Windows versions or a patch.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","windows"],"campaign_type":null,"search_a":"'-119840':15A,18A '-2026':14A,17A 'cve':13A,16A 'driver':5A 'file':3A 'gain':11A 'heap':6A 'let':8A 'local':9A 'overflow':7A 'privileg':12A 'system':4A 'udf':2A 'user':10A 'window':1A","search_b":"'attack':49B 'author':42B 'base':24B 'buffer':25B 'disk':31B 'driver':35B 'elev':51B 'file':33B 'format':32B 'heap':23B 'heap-bas':22B 'infrastructur':19B 'local':43B 'machin':55B 'overflow':26B 'privileg':52B 'say':47B 'sourc':46B 'system':34B 'trigger':39B 'udf':36B 'univers':30B 'user':44B 'window':20B,29B","search_c":"'allow':70C 'attack':73C 'author':72C 'base':58C 'buffer':59C 'disk':64C 'driver':68C 'elev':75C 'file':66C 'format':65C 'heap':57C 'heap-bas':56C 'local':77C 'overflow':60C 'privileg':76C 'system':67C 'udf':69C 'univers':63C 'window':62C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:01+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119840","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119840","severity":null,"published_at":"2026-11-10T19:20:01+00:00","modified_at":"2026-11-10T19:20:01+00:00","first_seen_at":"2026-11-10T19:24:58+00:00","fetched_at":"2026-11-10T19:24:58+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}