{"id":"CVE-2026-119932","kind":"vulnerability","aliases":["CVE-2026-119932"],"related":[],"title":"Windows Remote Desktop: null pointer flaw lets a network attacker crash service","description":"Null pointer dereference in Windows Remote Desktop allows an unauthorized attacker to deny service over a network.","summary":"A null pointer dereference in Windows Remote Desktop lets an unauthorized attacker on the network crash the service. The attack causes denial of service; the sources do not say it grants code execution or data access.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","remote-desktop","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:15+00:00","first_seen_at":"2026-11-10T19:25:03+00:00","triaged_at":"2026-11-10T19:44:32+00:00","updated_at":"2026-11-10T19:44:32+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T19:44:32Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Remote Desktop: null pointer flaw lets a network attacker crash service","impact":"low","summary":"A null pointer dereference in Windows Remote Desktop lets an unauthorized attacker on the network crash the service. The attack causes denial of service; the sources do not say it grants code execution or data access.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","remote-desktop"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Remote Desktop service crashes, denying access to remote users","analyst_note":"Confirm affected Windows builds, fixed KB or patch, and whether Remote Desktop must be enabled, from the Microsoft advisory for CVE-2026-119932.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Systems running the Windows Remote Desktop service, reachable over the network. The sources do not say which Windows versions or configurations are affected, so check the vendor advisory for the affected builds.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000664,"input_tokens":4490,"output_tokens":430,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Confirm affected Windows builds, fixed KB or patch, and whether Remote Desktop must be enabled, from the Microsoft advisory for CVE-2026-119932.","search":"'-119932':15A,18A '-2026':14A,17A 'access':59B 'allow':67C 'attack':10A,35B,43B,70C 'caus':44B 'code':55B 'crash':11A,39B 'cve':13A,16A 'data':58B 'deni':72C 'denial':45B 'derefer':27B,62C 'desktop':3A,22B,31B,66C 'execut':56B 'flaw':6A 'grant':54B 'infrastructur':19B 'let':7A,32B 'network':9A,38B,76C 'null':4A,25B,60C 'pointer':5A,26B,61C 'remot':2A,21B,30B,65C 'remote-desktop':20B 'say':52B 'servic':12A,41B,47B,73C 'sourc':49B 'unauthor':34B,69C 'window':1A,23B,29B,64C","nicknames":[],"mitigations":[],"who_affected":"Systems running the Windows Remote Desktop service, reachable over the network. The sources do not say which Windows versions or configurations are affected, so check the vendor advisory for the affected builds.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","remotedesktop","windows"],"campaign_type":null,"search_a":"'-119932':15A,18A '-2026':14A,17A 'attack':10A 'crash':11A 'cve':13A,16A 'desktop':3A 'flaw':6A 'let':7A 'network':9A 'null':4A 'pointer':5A 'remot':2A 'servic':12A 'window':1A","search_b":"'access':59B 'attack':35B,43B 'caus':44B 'code':55B 'crash':39B 'data':58B 'denial':45B 'derefer':27B 'desktop':22B,31B 'execut':56B 'grant':54B 'infrastructur':19B 'let':32B 'network':38B 'null':25B 'pointer':26B 'remot':21B,30B 'remote-desktop':20B 'say':52B 'servic':41B,47B 'sourc':49B 'unauthor':34B 'window':23B,29B","search_c":"'allow':67C 'attack':70C 'deni':72C 'derefer':62C 'desktop':66C 'network':76C 'null':60C 'pointer':61C 'remot':65C 'servic':73C 'unauthor':69C 'window':64C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:15+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119932","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119932","severity":null,"published_at":"2026-11-10T19:20:15+00:00","modified_at":"2026-11-10T19:20:15+00:00","first_seen_at":"2026-11-10T19:25:03+00:00","fetched_at":"2026-11-10T19:25:03+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}