{"id":"CVE-2026-119873","kind":"vulnerability","aliases":["CVE-2026-119873"],"related":[],"title":"Windows NetBIOS: use-after-free lets a local user gain higher privileges","description":"Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally.","summary":"A memory bug in the Windows NetBIOS component can be abused by a logged-in user with some access to raise their privileges on the same machine. The sources give no further technical detail.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","netbios","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:06+00:00","first_seen_at":"2026-11-10T19:25:00+00:00","triaged_at":"2026-11-10T19:51:37+00:00","updated_at":"2026-11-10T19:51:37+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:51:37Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows NetBIOS: use-after-free lets a local user gain higher privileges","impact":"high","summary":"A memory bug in the Windows NetBIOS component can be abused by a logged-in user with some access to raise their privileges on the same machine. The sources give no further technical detail.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","netbios"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated system privileges on the machine","analyst_note":"Check the Microsoft security update guide entry for CVE-2026-119873 to confirm affected Windows builds, the fixed update, and any mitigation for NetBIOS.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Windows machines with NetBIOS over TCP/IP enabled may be affected, but the sources do not say which Windows builds are vulnerable or what configuration is required. Systems where all users are fully trusted have less exposure to a local privilege escalation.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000665,"input_tokens":4480,"output_tokens":434,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the Microsoft security update guide entry for CVE-2026-119873 to confirm affected Windows builds, the fixed update, and any mitigation for NetBIOS.","search":"'-119873':16A,19A '-2026':15A,18A 'abus':33B 'access':42B 'allow':64C 'attack':67C 'author':66C 'bug':25B 'compon':30B 'cve':14A,17A 'detail':57B 'elev':69C 'free':6A,60C 'gain':11A 'give':53B 'higher':12A 'infrastructur':20B 'let':7A 'local':9A,71C 'log':37B 'logged-in':36B 'machin':50B 'memori':24B 'netbio':2A,21B,29B,63C 'privileg':13A,46B,70C 'rais':44B 'sourc':52B 'technic':56B 'use':4A,58C 'use-after-fre':3A 'user':10A,39B 'window':1A,22B,28B,62C","nicknames":[],"mitigations":[],"who_affected":"Windows machines with NetBIOS over TCP/IP enabled may be affected, but the sources do not say which Windows builds are vulnerable or what configuration is required. Systems where all users are fully trusted have less exposure to a local privilege escalation.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","netbios","windows"],"campaign_type":null,"search_a":"'-119873':16A,19A '-2026':15A,18A 'cve':14A,17A 'free':6A 'gain':11A 'higher':12A 'let':7A 'local':9A 'netbio':2A 'privileg':13A 'use':4A 'use-after-fre':3A 'user':10A 'window':1A","search_b":"'abus':33B 'access':42B 'bug':25B 'compon':30B 'detail':57B 'give':53B 'infrastructur':20B 'log':37B 'logged-in':36B 'machin':50B 'memori':24B 'netbio':21B,29B 'privileg':46B 'rais':44B 'sourc':52B 'technic':56B 'user':39B 'window':22B,28B","search_c":"'allow':64C 'attack':67C 'author':66C 'elev':69C 'free':60C 'local':71C 'netbio':63C 'privileg':70C 'use':58C 'window':62C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119873","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119873","severity":null,"published_at":"2026-11-10T19:20:06+00:00","modified_at":"2026-11-10T19:20:06+00:00","first_seen_at":"2026-11-10T19:25:00+00:00","fetched_at":"2026-11-10T19:25:00+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}