---
id: "CVE-2026-119935"
page: "https://infrastack.ai/live/CVE-2026-119935"
kind: "vulnerability"
aliases: ["CVE-2026-119935"]
title: "Windows Kernel: integer underflow lets an attacker with physical access gain privileges"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["endpoints", "infrastructure", "kernel", "windows"]
not_affected_if: ["locked-hardware", "no-physical-access"]
published_at: "2026-11-10T19:20:15+00:00"
first_seen_at: "2026-11-10T19:25:03+00:00"
updated_at: "2026-11-10T19:55:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119935", "first_seen_at": "2026-11-10T19:25:03+00:00"}]
exploit_sources: []
---

# Windows Kernel: integer underflow lets an attacker with physical access gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-119935 (this .md is for agents)

An integer underflow in the Windows kernel lets an unauthorized attacker raise their privileges when they have physical access to the machine. The sources give a CVSS score of 6.8 and do not describe a remote path.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the Windows build with `winver` and compare it to the fixed build in Microsoft's advisory for CVE-2026-119935 (unknown from the sources)

## Timeline

- 2026-11-10T19:25:03+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119935

## From the sources

Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_