{"id":"CVE-2026-119901","kind":"vulnerability","aliases":["CVE-2026-119901"],"related":[],"title":"Windows MIDI Service: null pointer flaw lets a local user gain privileges","description":"Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.","summary":"A null pointer dereference in the Windows MIDI Service Module lets an attacker who already has a local account raise their privileges. The sources give no further detail on the attack path.","severity":"medium","cvss":6.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","local-accounts","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:10+00:00","first_seen_at":"2026-11-10T19:25:02+00:00","triaged_at":"2026-11-10T19:58:19+00:00","updated_at":"2026-11-10T19:58:19+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:58:19Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows MIDI Service: null pointer flaw lets a local user gain privileges","impact":"high","summary":"A null pointer dereference in the Windows MIDI Service Module lets an attacker who already has a local account raise their privileges. The sources give no further detail on the attack path.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","local-accounts"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local attacker gains elevated privileges on the machine","analyst_note":"Check the Microsoft Security Response Center entry and NVD for affected Windows builds and the patched update.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Systems running the Windows MIDI Service Module with local user accounts are the ones to look at. The sources do not say which Windows builds are affected or what configuration is needed.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000643,"input_tokens":4493,"output_tokens":387,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119901':15A,18A '-2026':14A,17A 'account':22B,42B 'allow':64C 'alreadi':38B 'attack':36B,54B,67C 'author':66C 'cve':13A,16A 'derefer':27B,58C 'detail':51B 'elev':69C 'flaw':6A 'gain':11A 'give':48B 'infrastructur':19B 'let':7A,34B 'local':9A,21B,41B,71C 'local-account':20B 'midi':2A,31B,61C 'modul':33B,63C 'null':4A,25B,56C 'path':55B 'pointer':5A,26B,57C 'privileg':12A,45B,70C 'rais':43B 'servic':3A,32B,62C 'sourc':47B 'user':10A 'window':1A,23B,30B,60C","nicknames":[],"mitigations":[],"who_affected":"Systems running the Windows MIDI Service Module with local user accounts are the ones to look at. The sources do not say which Windows builds are affected or what configuration is needed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","localaccounts","medium","windows"],"campaign_type":null,"search_a":"'-119901':15A,18A '-2026':14A,17A 'cve':13A,16A 'flaw':6A 'gain':11A 'let':7A 'local':9A 'midi':2A 'null':4A 'pointer':5A 'privileg':12A 'servic':3A 'user':10A 'window':1A","search_b":"'account':22B,42B 'alreadi':38B 'attack':36B,54B 'derefer':27B 'detail':51B 'give':48B 'infrastructur':19B 'let':34B 'local':21B,41B 'local-account':20B 'midi':31B 'modul':33B 'null':25B 'path':55B 'pointer':26B 'privileg':45B 'rais':43B 'servic':32B 'sourc':47B 'window':23B,30B","search_c":"'allow':64C 'attack':67C 'author':66C 'derefer':58C 'elev':69C 'local':71C 'midi':61C 'modul':63C 'null':56C 'pointer':57C 'privileg':70C 'servic':62C 'window':60C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:10+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119901","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119901","severity":null,"published_at":"2026-11-10T19:20:10+00:00","modified_at":"2026-11-10T19:20:10+00:00","first_seen_at":"2026-11-10T19:25:02+00:00","fetched_at":"2026-11-10T19:25:02+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}