{"id":"CVE-2026-119862","kind":"vulnerability","aliases":["CVE-2026-119862"],"related":[],"title":"Windows Input System: out-of-bounds read lets local user gain higher privileges","description":"Out-of-bounds read in Windows Input System allows an authorized attacker to elevate privileges locally.","summary":"A memory read past the end of a buffer in the Windows Input System lets an attacker who already has a local account raise their privileges. The sources do not say which Windows versions are affected or how the flaw is triggered.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:04+00:00","first_seen_at":"2026-11-10T19:25:00+00:00","triaged_at":"2026-11-10T19:28:07+00:00","updated_at":"2026-11-10T19:28:07+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:28:07Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Input System: out-of-bounds read lets local user gain higher privileges","impact":"high","summary":"A memory read past the end of a buffer in the Windows Input System lets an attacker who already has a local account raise their privileges. The sources do not say which Windows versions are affected or how the flaw is triggered.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains administrator or SYSTEM privileges on the machine","analyst_note":"Find the Microsoft Security Response Center advisory for CVE-2026-119862 to confirm affected Windows builds and the patch.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Anyone with a local login to an affected Windows machine could use this to gain higher privileges. The sources do not list affected Windows builds or the exact trigger, so teams should check their Windows patch level against the vendor advisory.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00066,"input_tokens":4484,"output_tokens":424,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the Microsoft Security Response Center advisory for CVE-2026-119862 to confirm affected Windows builds and the patch.","search":"'-119862':17A,20A '-2026':16A,19A 'account':45B 'affect':58B 'allow':74C 'alreadi':41B 'attack':39B,77C 'author':76C 'bound':7A,68C 'buffer':31B 'cve':15A,18A 'elev':79C 'end':28B 'flaw':62B 'gain':12A 'higher':13A 'infrastructur':21B 'input':2A,35B,72C 'let':9A,37B 'local':10A,44B,81C 'memori':24B 'out-of-bound':4A,65C 'past':26B 'privileg':14A,48B,80C 'rais':46B 'read':8A,25B,69C 'say':53B 'sourc':50B 'system':3A,36B,73C 'trigger':64B 'user':11A 'version':56B 'window':1A,22B,34B,55B,71C","nicknames":[],"mitigations":[],"who_affected":"Anyone with a local login to an affected Windows machine could use this to gain higher privileges. The sources do not list affected Windows builds or the exact trigger, so teams should check their Windows patch level against the vendor advisory.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","windows"],"campaign_type":null,"search_a":"'-119862':17A,20A '-2026':16A,19A 'bound':7A 'cve':15A,18A 'gain':12A 'higher':13A 'input':2A 'let':9A 'local':10A 'out-of-bound':4A 'privileg':14A 'read':8A 'system':3A 'user':11A 'window':1A","search_b":"'account':45B 'affect':58B 'alreadi':41B 'attack':39B 'buffer':31B 'end':28B 'flaw':62B 'infrastructur':21B 'input':35B 'let':37B 'local':44B 'memori':24B 'past':26B 'privileg':48B 'rais':46B 'read':25B 'say':53B 'sourc':50B 'system':36B 'trigger':64B 'version':56B 'window':22B,34B,55B","search_c":"'allow':74C 'attack':77C 'author':76C 'bound':68C 'elev':79C 'input':72C 'local':81C 'out-of-bound':65C 'privileg':80C 'read':69C 'system':73C 'window':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:04+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119862","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119862","severity":null,"published_at":"2026-11-10T19:20:04+00:00","modified_at":"2026-11-10T19:20:05+00:00","first_seen_at":"2026-11-10T19:25:00+00:00","fetched_at":"2026-11-10T19:25:00+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}