---
id: "CVE-2026-119884"
page: "https://infrastack.ai/live/CVE-2026-119884"
kind: "vulnerability"
aliases: ["CVE-2026-119884"]
title: "Windows Kernel: heap overflow lets a physical attacker gain higher privileges"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:20:08+00:00"
first_seen_at: "2026-11-10T19:25:01+00:00"
updated_at: "2026-11-10T19:55:39+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119884", "first_seen_at": "2026-11-10T19:25:01+00:00"}]
exploit_sources: []
---

# Windows Kernel: heap overflow lets a physical attacker gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-119884 (this .md is for agents)

A heap-based buffer overflow in the Windows kernel lets an attacker who already has physical access to the machine raise their privileges. The sources do not say which Windows versions are affected or what the attacker must do first.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:01+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119884

## From the sources

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_