{"id":"CVE-2026-119884","kind":"vulnerability","aliases":["CVE-2026-119884"],"related":[],"title":"Windows Kernel: heap overflow lets a physical attacker gain higher privileges","description":"Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.","summary":"A heap-based buffer overflow in the Windows kernel lets an attacker who already has physical access to the machine raise their privileges. The sources do not say which Windows versions are affected or what the attacker must do first.","severity":"medium","cvss":6.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:08+00:00","first_seen_at":"2026-11-10T19:25:01+00:00","triaged_at":"2026-11-10T19:55:39+00:00","updated_at":"2026-11-10T19:55:39+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:55:39Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Kernel: heap overflow lets a physical attacker gain higher privileges","impact":"high","summary":"A heap-based buffer overflow in the Windows kernel lets an attacker who already has physical access to the machine raise their privileges. The sources do not say which Windows versions are affected or what the attacker must do first.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker with physical access gains elevated system privileges on Windows","analyst_note":"Find the Microsoft security update guide entry for CVE-2026-119884 to confirm affected Windows builds, the fixed update, and the physical-access preconditions.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000636,"input_tokens":4502,"output_tokens":371,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119884':14A,17A '-2026':13A,16A 'access':37B 'affect':53B 'allow':69C 'alreadi':34B 'attack':8A,32B,57B,72C,79C 'base':23B,63C 'buffer':24B,64C 'cve':12A,15A 'elev':74C 'first':60B 'gain':9A 'heap':3A,22B,62C 'heap-bas':21B,61C 'higher':10A 'infrastructur':18B 'kernel':2A,29B,68C 'let':5A,30B 'machin':40B 'must':58B 'overflow':4A,25B,65C 'physic':7A,36B,78C 'privileg':11A,43B,75C 'rais':41B 'say':48B 'sourc':45B 'unauthor':71C 'version':51B 'window':1A,19B,28B,50B,67C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","windows"],"campaign_type":null,"search_a":"'-119884':14A,17A '-2026':13A,16A 'attack':8A 'cve':12A,15A 'gain':9A 'heap':3A 'higher':10A 'kernel':2A 'let':5A 'overflow':4A 'physic':7A 'privileg':11A 'window':1A","search_b":"'access':37B 'affect':53B 'alreadi':34B 'attack':32B,57B 'base':23B 'buffer':24B 'first':60B 'heap':22B 'heap-bas':21B 'infrastructur':18B 'kernel':29B 'let':30B 'machin':40B 'must':58B 'overflow':25B 'physic':36B 'privileg':43B 'rais':41B 'say':48B 'sourc':45B 'version':51B 'window':19B,28B,50B","search_c":"'allow':69C 'attack':72C,79C 'base':63C 'buffer':64C 'elev':74C 'heap':62C 'heap-bas':61C 'kernel':68C 'overflow':65C 'physic':78C 'privileg':75C 'unauthor':71C 'window':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119884","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119884","severity":null,"published_at":"2026-11-10T19:20:08+00:00","modified_at":"2026-11-10T19:20:08+00:00","first_seen_at":"2026-11-10T19:25:01+00:00","fetched_at":"2026-11-10T19:25:01+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}