{"id":"CVE-2026-119914","kind":"vulnerability","aliases":["CVE-2026-119914"],"related":[],"title":"Windows Setup and Deployment: local privilege escalation via unrestricted communication channel","description":"Improper restriction of communication channel to intended endpoints in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.","summary":"Windows Setup and Deployment does not restrict its communication channel to the intended endpoints. An authorized local attacker can use this to elevate privileges on the machine.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows","windows-deployment","windows-setup"],"not_affected_if":["unknown"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:12+00:00","first_seen_at":"2026-11-10T19:25:02+00:00","triaged_at":"2026-11-10T19:55:52+00:00","updated_at":"2026-11-10T19:55:52+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:55:52Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Setup and Deployment: local privilege escalation via unrestricted communication channel","impact":"high","summary":"Windows Setup and Deployment does not restrict its communication channel to the intended endpoints. An authorized local attacker can use this to elevate privileges on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","windows-setup","windows-deployment"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"local attacker gains elevated privileges on the machine","analyst_note":"Find the Microsoft security update guide entry for CVE-2026-119914 to get affected builds, fixed versions and mitigation.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Windows machines running the affected Windows Setup and Deployment component. The sources give no affected build numbers and do not say how the channel is reached, so the exact exposure is unknown. Local, authorized users are the stated attacker.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000663,"input_tokens":4499,"output_tokens":427,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119914':14A,17A '-2026':13A,16A 'allow':66C 'attack':43B,69C 'author':41B,68C 'channel':11A,35B,57C 'communic':10A,34B,56C 'cve':12A,15A 'deploy':4A,22B,29B,65C 'elev':48B,71C 'endpoint':39B,60C 'escal':7A 'improp':53C 'infrastructur':18B 'intend':38B,59C 'local':5A,42B,73C 'machin':52B 'privileg':6A,49B,72C 'restrict':32B,54C 'setup':2A,25B,27B,63C 'unrestrict':9A 'use':45B 'via':8A 'window':1A,19B,21B,24B,26B,62C 'windows-deploy':20B 'windows-setup':23B","nicknames":[],"mitigations":[],"who_affected":"Windows machines running the affected Windows Setup and Deployment component. The sources give no affected build numbers and do not say how the channel is reached, so the exact exposure is unknown. Local, authorized users are the stated attacker.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","windows","windowsdeployment","windowssetup"],"campaign_type":null,"search_a":"'-119914':14A,17A '-2026':13A,16A 'channel':11A 'communic':10A 'cve':12A,15A 'deploy':4A 'escal':7A 'local':5A 'privileg':6A 'setup':2A 'unrestrict':9A 'via':8A 'window':1A","search_b":"'attack':43B 'author':41B 'channel':35B 'communic':34B 'deploy':22B,29B 'elev':48B 'endpoint':39B 'infrastructur':18B 'intend':38B 'local':42B 'machin':52B 'privileg':49B 'restrict':32B 'setup':25B,27B 'use':45B 'window':19B,21B,24B,26B 'windows-deploy':20B 'windows-setup':23B","search_c":"'allow':66C 'attack':69C 'author':68C 'channel':57C 'communic':56C 'deploy':65C 'elev':71C 'endpoint':60C 'improp':53C 'intend':59C 'local':73C 'privileg':72C 'restrict':54C 'setup':63C 'window':62C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:12+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119914","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119914","severity":null,"published_at":"2026-11-10T19:20:12+00:00","modified_at":"2026-11-10T19:20:13+00:00","first_seen_at":"2026-11-10T19:25:02+00:00","fetched_at":"2026-11-10T19:25:02+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}