{"id":"CVE-2026-119944","kind":"vulnerability","aliases":["CVE-2026-119944"],"related":[],"title":"Windows: heap overflow in Mobile Device Management lets attackers gain higher privileges","description":"Heap-based buffer overflow in Windows Mobile Device Management allows an unauthorized attacker to elevate privileges over a network.","summary":"A heap-based buffer overflow in the Windows Mobile Device Management component lets an unauthorized attacker elevate privileges over the network. The sources give a CVSS score of 7.5 and do not describe any exploitation in the wild.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["enterprise","infrastructure","mobile-device-management","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:17+00:00","first_seen_at":"2026-11-10T19:25:04+00:00","triaged_at":"2026-11-10T19:44:31+00:00","updated_at":"2026-11-10T19:44:31+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:44:31Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"network","title":"Windows: heap overflow in Mobile Device Management lets attackers gain higher privileges","impact":"high","summary":"A heap-based buffer overflow in the Windows Mobile Device Management component lets an unauthorized attacker elevate privileges over the network. The sources give a CVSS score of 7.5 and do not describe any exploitation in the wild.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","mobile-device-management","enterprise"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker gains elevated privileges on the Windows machine over the network","analyst_note":"Find the Microsoft security update guide entry for CVE-2026-119944 to confirm affected Windows builds, fixed versions and enrollment requirements.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Windows systems that run the Mobile Device Management component, typically machines enrolled in device management by an organization. The sources do not say which Windows builds or enrollment settings are required, so the exposed set is unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00068,"input_tokens":4502,"output_tokens":459,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the Microsoft security update guide entry for CVE-2026-119944 to confirm affected Windows builds, fixed versions and enrollment requirements.","search":"'-119944':15A,18A '-2026':14A,17A '7.5':55B 'allow':75C 'attack':9A,42B,78C 'base':29B,67C 'buffer':30B,68C 'compon':38B 'cve':13A,16A 'cvss':52B 'describ':59B 'devic':6A,23B,36B,73C 'elev':43B,80C 'enterpris':19B 'exploit':61B 'gain':10A 'give':50B 'heap':2A,28B,66C 'heap-bas':27B,65C 'higher':11A 'infrastructur':20B 'let':8A,39B 'manag':7A,24B,37B,74C 'mobil':5A,22B,35B,72C 'mobile-device-manag':21B 'network':47B,84C 'overflow':3A,31B,69C 'privileg':12A,44B,81C 'score':53B 'sourc':49B 'unauthor':41B,77C 'wild':64B 'window':1A,25B,34B,71C","nicknames":[],"mitigations":[],"who_affected":"Windows systems that run the Mobile Device Management component, typically machines enrolled in device management by an organization. The sources do not say which Windows builds or enrollment settings are required, so the exposed set is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["enterprise","high","infrastructure","mobiledevicemanagement","windows"],"campaign_type":null,"search_a":"'-119944':15A,18A '-2026':14A,17A 'attack':9A 'cve':13A,16A 'devic':6A 'gain':10A 'heap':2A 'higher':11A 'let':8A 'manag':7A 'mobil':5A 'overflow':3A 'privileg':12A 'window':1A","search_b":"'7.5':55B 'attack':42B 'base':29B 'buffer':30B 'compon':38B 'cvss':52B 'describ':59B 'devic':23B,36B 'elev':43B 'enterpris':19B 'exploit':61B 'give':50B 'heap':28B 'heap-bas':27B 'infrastructur':20B 'let':39B 'manag':24B,37B 'mobil':22B,35B 'mobile-device-manag':21B 'network':47B 'overflow':31B 'privileg':44B 'score':53B 'sourc':49B 'unauthor':41B 'wild':64B 'window':25B,34B","search_c":"'allow':75C 'attack':78C 'base':67C 'buffer':68C 'devic':73C 'elev':80C 'heap':66C 'heap-bas':65C 'manag':74C 'mobil':72C 'network':84C 'overflow':69C 'privileg':81C 'unauthor':77C 'window':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:17+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119944","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119944","severity":null,"published_at":"2026-11-10T19:20:17+00:00","modified_at":"2026-11-10T19:20:17+00:00","first_seen_at":"2026-11-10T19:25:04+00:00","fetched_at":"2026-11-10T19:25:04+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}