---
id: "CVE-2026-119847"
page: "https://infrastack.ai/live/CVE-2026-119847"
kind: "vulnerability"
aliases: ["CVE-2026-119847"]
title: "Windows Kerberos: heap buffer overflow lets a local user gain higher privileges"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["active-directory", "infrastructure", "kerberos", "local-privilege-escalation", "windows"]
not_affected_if: ["no-local-logon"]
published_at: "2026-11-10T19:20:01+00:00"
first_seen_at: "2026-11-10T19:24:59+00:00"
updated_at: "2026-11-10T22:48:05+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119847", "first_seen_at": "2026-11-10T19:24:59+00:00"}, {"source": "analyst", "url": "https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-119847", "first_seen_at": "2026-11-10T22:48:05+00:00", "cites": ["https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-119847"]}]
exploit_sources: []
---

# Windows Kerberos: heap buffer overflow lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-119847 (this .md is for agents)

Heap-based buffer overflow (CWE-122) in Windows Kerberos. A local, low-privileged user can exploit it with no user interaction and gain SYSTEM privileges. MSRC (Nov 2026 release) rates it Important, CVSS 7.8, 'Exploitation Less Likely', not publicly disclosed and not exploited at release. The MSRC data does not list affected builds or KB numbers.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Open the MSRC Security Update Guide entry for CVE-2026-119847 and find the KB for your Windows version. Then check that it is installed with: Get-HotFix -Id KBxxxxxxx. The build-to-KB mapping was not readable in the sources I could get; the entry is JavaScript-only, and the API I used returned no product table.

## Fix

Install the November 2026 Windows security update for your edition (MSRC lists it as customer action required). Exact KB and build numbers: unknown. Check the MSRC entry.

## Timeline

- 2026-11-10T19:24:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119847
- 2026-11-10T22:48:05+00:00 analyst https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-119847 — MSRC SUG API (primary) read: EoP, Important, 7.8, not exploited, not disclosed, Exploitation Less Likely, SYSTEM. No affected builds or KBs in it, and NVD had nothing. Sibling Kerberos CVEs (62752, 62754, 69685) have build lists but are different CVEs, so I did not copy them. Nothing marked verified: the payload does not list products, fix or check.

## Documents

- [advisory] MSRC: Windows Kerberos Elevation of Privilege Vulnerability CVE-2026-119847 https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-119847

## From the sources

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_