{"id":"CVE-2026-119907","kind":"vulnerability","aliases":["CVE-2026-119907"],"related":[],"title":"Windows: Function Discovery Resource Publication lets a local user gain privileges","description":"Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally.","summary":"A pointer in the Windows Function Discovery Resource Publication component is dereferenced without validation. An authorized local attacker can use it to elevate privileges on the machine.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","self-hosted","windows"],"not_affected_if":["non-windows-systems"],"how_to_check":"- Check the Windows build with `winver` and compare it against the Microsoft security update guide entry for CVE-2026-119907\n- Confirm Windows Update shows the latest cumulative update installed","fix":null,"status":"open","published_at":"2026-11-10T19:20:11+00:00","first_seen_at":"2026-11-10T19:25:02+00:00","triaged_at":"2026-11-10T19:40:15+00:00","updated_at":"2026-11-10T19:40:15+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:40:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows: Function Discovery Resource Publication lets a local user gain privileges","impact":"high","summary":"A pointer in the Windows Function Discovery Resource Publication component is dereferenced without validation. An authorized local attacker can use it to elevate privileges on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains SYSTEM-level privileges on the machine","analyst_note":"Find the affected Windows builds and the fixed update in the Microsoft Security Update Guide for CVE-2026-119907; the NVD entry gave no version or patch detail.","how_to_check":"- Check the Windows build with `winver` and compare it against the Microsoft security update guide entry for CVE-2026-119907\n- Confirm Windows Update shows the latest cumulative update installed","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["non-windows-systems"],"who_is_affected":"Windows machines where a user already has a local account can use this flaw to gain higher privileges. The sources do not name the affected Windows builds. Servers and workstations both run the affected component, so check patch status across the fleet.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000698,"input_tokens":4499,"output_tokens":496,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the affected Windows builds and the fixed update in the Microsoft Security Update Guide for CVE-2026-119907; the NVD entry gave no version or patch detail.","search":"'-119907':14A,17A '-2026':13A,16A 'allow':59C 'attack':40B,62C 'author':38B,61C 'compon':32B 'cve':12A,15A 'derefer':52C 'dereferenc':34B 'discoveri':3A,29B,56C 'elev':45B,64C 'function':2A,28B,55C 'gain':10A 'host':21B 'infrastructur':18B 'let':6A 'local':8A,39B,66C 'machin':49B 'pointer':24B,51C 'privileg':11A,46B,65C 'public':5A,31B,58C 'resourc':4A,30B,57C 'self':20B 'self-host':19B 'untrust':50C 'use':42B 'user':9A 'valid':36B 'window':1A,22B,27B,54C 'without':35B","nicknames":[],"mitigations":[],"who_affected":"Windows machines where a user already has a local account can use this flaw to gain higher privileges. The sources do not name the affected Windows builds. Servers and workstations both run the affected component, so check patch status across the fleet.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","selfhosted","windows"],"campaign_type":null,"search_a":"'-119907':14A,17A '-2026':13A,16A 'cve':12A,15A 'discoveri':3A 'function':2A 'gain':10A 'let':6A 'local':8A 'privileg':11A 'public':5A 'resourc':4A 'user':9A 'window':1A","search_b":"'attack':40B 'author':38B 'compon':32B 'dereferenc':34B 'discoveri':29B 'elev':45B 'function':28B 'host':21B 'infrastructur':18B 'local':39B 'machin':49B 'pointer':24B 'privileg':46B 'public':31B 'resourc':30B 'self':20B 'self-host':19B 'use':42B 'valid':36B 'window':22B,27B 'without':35B","search_c":"'allow':59C 'attack':62C 'author':61C 'derefer':52C 'discoveri':56C 'elev':64C 'function':55C 'local':66C 'pointer':51C 'privileg':65C 'public':58C 'resourc':57C 'untrust':50C 'window':54C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:11+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119907","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119907","severity":null,"published_at":"2026-11-10T19:20:11+00:00","modified_at":"2026-11-10T19:20:11+00:00","first_seen_at":"2026-11-10T19:25:02+00:00","fetched_at":"2026-11-10T19:25:02+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}