---
id: "CVE-2026-119916"
page: "https://infrastack.ai/live/CVE-2026-119916"
kind: "vulnerability"
aliases: ["CVE-2026-119916"]
title: "Windows Input System: heap overflow lets a local user gain higher privileges"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows Input System", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "Windows 10 1809 / Server 2019", "fixed": ["10.0.17763.9487"], "affected": "< 10.0.17763.9487", "ecosystem": "vendor"}, {"name": "Windows 10 21H2", "fixed": ["10.0.19044.7846"], "affected": "< 10.0.19044.7846", "ecosystem": "vendor"}, {"name": "Windows 10 22H2", "fixed": ["10.0.19045.7846"], "affected": "< 10.0.19045.7846", "ecosystem": "vendor"}, {"name": "Windows 11 23H2", "fixed": ["10.0.22631.7711"], "affected": "< 10.0.22631.7711", "ecosystem": "vendor"}, {"name": "Windows 11 24H2", "fixed": ["10.0.26100.9974"], "affected": "< 10.0.26100.9974", "ecosystem": "vendor"}, {"name": "Windows 11 25H2", "fixed": ["10.0.26200.9974"], "affected": "< 10.0.26200.9974", "ecosystem": "vendor"}, {"name": "Windows 11 26H1", "fixed": ["10.0.28000.3501"], "affected": "< 10.0.28000.3501", "ecosystem": "vendor"}, {"name": "Windows 11 26H2", "fixed": ["10.0.26300.9974"], "affected": "< 10.0.26300.9974", "ecosystem": "vendor"}, {"name": "Windows Server 2022", "fixed": ["10.0.20348.5870"], "affected": "< 10.0.20348.5870", "ecosystem": "vendor"}, {"name": "Windows Server 2025", "fixed": ["10.0.26100.33822"], "affected": "< 10.0.26100.33822", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "local-accounts", "terminal-server", "windows"]
not_affected_if: ["no-untrusted-local-users", "single-user-machine"]
published_at: "2026-11-10T19:20:13+00:00"
first_seen_at: "2026-11-10T19:25:02+00:00"
updated_at: "2026-11-10T22:23:10+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119916", "first_seen_at": "2026-11-10T19:25:02+00:00"}, {"source": "analyst", "url": "https://cve.imfht.com/detail/CVE-2026-119916", "first_seen_at": "2026-11-10T22:23:10+00:00", "cites": ["https://cve.imfht.com/detail/CVE-2026-119916", "https://radar.offseq.com/threat/cve-2026-119916-cwe-122-heap-based-buffer-overflow-in-microsoft-windows-10-version-1809-348ec496837259a4"]}]
exploit_sources: []
---

# Windows Input System: heap overflow lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-119916 (this .md is for agents)

A heap-based buffer overflow in the Windows Input System lets an attacker who already has a local account raise their privileges. The attacker gets the rights of a higher-privileged user or the system itself.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows Input System affected range not listed fixed no fixed version listed
- vendor:Windows 10 1809 / Server 2019 affected < 10.0.17763.9487 fixed 10.0.17763.9487
- vendor:Windows 10 21H2 affected < 10.0.19044.7846 fixed 10.0.19044.7846
- vendor:Windows 10 22H2 affected < 10.0.19045.7846 fixed 10.0.19045.7846
- vendor:Windows 11 23H2 affected < 10.0.22631.7711 fixed 10.0.22631.7711
- vendor:Windows 11 24H2 affected < 10.0.26100.9974 fixed 10.0.26100.9974
- vendor:Windows 11 25H2 affected < 10.0.26200.9974 fixed 10.0.26200.9974
- vendor:Windows 11 26H1 affected < 10.0.28000.3501 fixed 10.0.28000.3501
- vendor:Windows 11 26H2 affected < 10.0.26300.9974 fixed 10.0.26300.9974
- vendor:Windows Server 2022 affected < 10.0.20348.5870 fixed 10.0.20348.5870
- vendor:Windows Server 2025 affected < 10.0.26100.33822 fixed 10.0.26100.33822

## How to check

Run winver (or [Environment]::OSVersion) to get the full build number, e.g. 10.0.19045.xxxx. You are exposed if it is below the fixed build for your release (see fix). Windows Update history should show the November 2026 cumulative update (e.g. KB5131096 for Win10 ESU).

## Fix

Install the November 2026 cumulative update (Patch Tuesday, 10 Nov 2026). Fixed builds: Win10 1809/Server 2019 10.0.17763.9487, Win10 21H2 19044.7846, Win10 22H2 19045.7846, Win11 23H2 22631.7711, Win11 24H2 26100.9974, Win11 25H2 26200.9974, Win11 26H1 28000.3501, Win11 26H2 26300.9974, Server 2022 20348.5870, Server 2025 26100.33822. Confirm against MSRC.

## Timeline

- 2026-11-10T19:25:02+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119916
- 2026-11-10T22:23:10+00:00 analyst https://cve.imfht.com/detail/CVE-2026-119916 — MSRC page is JS-only and unreadable here, so no primary doc linked and nothing marked verified. Build matrix is from a CVE List V5 mirror (cve.imfht.com) and OffSeq; BleepingComputer confirms Windows 10 22H2 19045.7846 and LTSC 2021 19044.7846 from the Nov 2026 Patch Tuesday. No exploitation or PoC reported. Search worked; X not checked.

## Documents

- [describes] CVE-2026-119916 (CVE List V5 mirror, affected build matrix) https://cve.imfht.com/detail/CVE-2026-119916
- [describes] OffSeq Threat Radar: CVE-2026-119916 https://radar.offseq.com/threat/cve-2026-119916-cwe-122-heap-based-buffer-overflow-in-microsoft-windows-10-version-1809-348ec496837259a4
- [mentions] Windows 10 KB5131096 ESU (Nov 2026 Patch Tuesday) https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-windows-10-kb5131096-extended-security-update/

## From the sources

Heap-based buffer overflow in Windows Input System allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_