{"id":"CVE-2026-119848","kind":"vulnerability","aliases":["CVE-2026-119848"],"related":[],"title":"Windows Message Queuing: bad input lets an authorized user crash the service","description":"Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network.","summary":"Windows Message Queuing does not validate some input properly. An attacker with valid access can send crafted traffic over the network to deny service to the queue.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Windows Message Queuing","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["infrastructure","msmq","windows"],"not_affected_if":["msmq-not-installed"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:02+00:00","first_seen_at":"2026-11-10T19:24:59+00:00","triaged_at":"2026-11-10T20:02:32+00:00","updated_at":"2026-11-10T20:02:32+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:02:32Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Message Queuing: bad input lets an authorized user crash the service","impact":"low","summary":"Windows Message Queuing does not validate some input properly. An attacker with valid access can send crafted traffic over the network to deny service to the queue.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","msmq"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Message Queuing service becomes unavailable for legitimate users","analyst_note":"Confirm affected Windows builds and the Microsoft advisory fix from https://nvd.nist.gov/vuln/detail/CVE-2026-119848 and vendor MSRC page.","how_to_check":"- unknown","plain_action":"","product_name":"Windows Message Queuing","needs_analyst":true,"not_affected_if":["msmq-not-installed"],"who_is_affected":"Systems that run the Windows Message Queuing (MSMQ) feature and accept network connections to it are the ones to look at. The sources do not say which Windows versions or configurations are affected.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000673,"input_tokens":4481,"output_tokens":450,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119848':15A,18A '-2026':14A,17A 'access':38B 'allow':59C 'attack':35B,62C 'author':8A,61C 'bad':4A 'craft':41B 'crash':10A 'cve':13A,16A 'deni':47B,64C 'improp':52C 'infrastructur':22B 'input':5A,32B,53C 'let':6A 'messag':2A,26B,57C 'message':20A 'msmq':23B 'network':45B,68C 'proper':33B 'queu':3A,27B,58C 'queue':51B 'queuing':21A 'send':40B 'servic':12A,48B,65C 'traffic':42B 'user':9A 'valid':30B,37B,54C 'window':1A,24B,25B,56C 'windows':19A","nicknames":[],"mitigations":[],"who_affected":"Systems that run the Windows Message Queuing (MSMQ) feature and accept network connections to it are the ones to look at. The sources do not say which Windows versions or configurations are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["messagequeuing","windowsmessagequeuing"],"ptokens":["message","queuing","windows"],"labels":["infrastructure","medium","msmq","vendor","windows"],"campaign_type":null,"search_a":"'-119848':15A,18A '-2026':14A,17A 'author':8A 'bad':4A 'crash':10A 'cve':13A,16A 'input':5A 'let':6A 'messag':2A 'message':20A 'queu':3A 'queuing':21A 'servic':12A 'user':9A 'window':1A 'windows':19A","search_b":"'access':38B 'attack':35B 'craft':41B 'deni':47B 'infrastructur':22B 'input':32B 'messag':26B 'msmq':23B 'network':45B 'proper':33B 'queu':27B 'queue':51B 'send':40B 'servic':48B 'traffic':42B 'valid':30B,37B 'window':24B,25B","search_c":"'allow':59C 'attack':62C 'author':61C 'deni':64C 'improp':52C 'input':53C 'messag':57C 'network':68C 'queu':58C 'servic':65C 'valid':54C 'window':56C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:02+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119848","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119848","severity":null,"published_at":"2026-11-10T19:20:02+00:00","modified_at":"2026-11-10T19:20:02+00:00","first_seen_at":"2026-11-10T19:24:59+00:00","fetched_at":"2026-11-10T19:24:59+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}