{"id":"CVE-2026-119952","kind":"vulnerability","aliases":["CVE-2026-119952"],"related":[],"title":"Windows Schannel: timing discrepancy lets a network attacker run code","description":"Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.","summary":"Windows Schannel, the Microsoft TLS library used for encrypted connections, has an observable timing discrepancy that an unauthorized attacker can use over the network. According to the NVD entry, this allows the attacker to execute code.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Windows Schannel","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["infrastructure","schannel","tls","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:18+00:00","first_seen_at":"2026-11-10T19:25:04+00:00","triaged_at":"2026-11-10T19:34:43+00:00","updated_at":"2026-11-10T19:34:43+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:34:43Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Schannel: timing discrepancy lets a network attacker run code","impact":"high","summary":"Windows Schannel, the Microsoft TLS library used for encrypted connections, has an observable timing discrepancy that an unauthorized attacker can use over the network. According to the NVD entry, this allows the attacker to execute code.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","schannel","tls"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker runs code on a Windows machine over the network","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-119952 for affected Windows builds, the fixed update, and any required configuration; the NVD record alone gives no versions or fix.","how_to_check":"unknown","plain_action":"","product_name":"Windows Schannel","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000654,"input_tokens":4488,"output_tokens":411,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-119952 for affected Windows builds, the fixed update, and any required configuration; the NVD record alone gives no versions or fix.","search":"'-119952':13A,16A '-2026':12A,15A 'accord':47B 'allow':53B,65C 'attack':8A,41B,55B,68C 'code':10A,58B,71C 'connect':32B 'cve':11A,14A 'discrep':4A,37B,61C 'encrypt':31B 'entri':51B 'execut':57B,70C 'infrastructur':19B 'let':5A 'librari':28B 'microsoft':26B 'network':7A,46B,74C 'nvd':50B 'observ':35B,59C 'run':9A 'schannel':2A,18A,20B,24B,64C 'time':3A,36B,60C 'tls':21B,27B 'unauthor':40B,67C 'use':29B,43B 'window':1A,22B,23B,63C 'windows':17A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["schannel","windowsschannel"],"ptokens":["schannel","windows"],"labels":["high","infrastructure","schannel","tls","vendor","windows"],"campaign_type":null,"search_a":"'-119952':13A,16A '-2026':12A,15A 'attack':8A 'code':10A 'cve':11A,14A 'discrep':4A 'let':5A 'network':7A 'run':9A 'schannel':2A,18A 'time':3A 'window':1A 'windows':17A","search_b":"'accord':47B 'allow':53B 'attack':41B,55B 'code':58B 'connect':32B 'discrep':37B 'encrypt':31B 'entri':51B 'execut':57B 'infrastructur':19B 'librari':28B 'microsoft':26B 'network':46B 'nvd':50B 'observ':35B 'schannel':20B,24B 'time':36B 'tls':21B,27B 'unauthor':40B 'use':29B,43B 'window':22B,23B","search_c":"'allow':65C 'attack':68C 'code':71C 'discrep':61C 'execut':70C 'network':74C 'observ':59C 'schannel':64C 'time':60C 'unauthor':67C 'window':63C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:18+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119952","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119952","severity":null,"published_at":"2026-11-10T19:20:18+00:00","modified_at":"2026-11-10T19:20:18+00:00","first_seen_at":"2026-11-10T19:25:04+00:00","fetched_at":"2026-11-10T19:25:04+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}