---
id: "CVE-2026-119849"
page: "https://infrastack.ai/live/CVE-2026-119849"
kind: "vulnerability"
aliases: ["CVE-2026-119849"]
title: "Windows: Virtual Hard Disk driver overflow lets a local user run code"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "virtual-hard-disk", "windows"]
not_affected_if: ["no-local-access"]
published_at: "2026-11-10T19:20:02+00:00"
first_seen_at: "2026-11-10T19:24:59+00:00"
updated_at: "2026-11-10T19:51:47+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119849", "first_seen_at": "2026-11-10T19:24:59+00:00"}]
exploit_sources: []
---

# Windows: Virtual Hard Disk driver overflow lets a local user run code

Link for people: https://infrastack.ai/live/CVE-2026-119849 (this .md is for agents)

A stack-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver in Windows can be triggered by an authorized local attacker. The sources say it allows code execution on the affected machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119849

## From the sources

Stack-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_