---
id: "CVE-2026-119840"
page: "https://infrastack.ai/live/CVE-2026-119840"
kind: "vulnerability"
aliases: ["CVE-2026-119840"]
title: "Windows UDF file system driver heap overflow lets local users gain privileges"
severity: "medium"
cvss: 6.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "windows"]
not_affected_if: ["unknown"]
published_at: "2026-11-10T19:20:01+00:00"
first_seen_at: "2026-11-10T19:24:58+00:00"
updated_at: "2026-11-10T19:58:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119840", "first_seen_at": "2026-11-10T19:24:58+00:00"}]
exploit_sources: []
---

# Windows UDF file system driver heap overflow lets local users gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-119840 (this .md is for agents)

A heap-based buffer overflow in the Windows Universal Disk Format file system driver (UDFS) can be triggered by an authorized local user. The sources say an attacker can elevate privileges on the machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:58+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119840

## From the sources

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_