{"id":"CVE-2026-119953","kind":"vulnerability","aliases":["CVE-2026-119953"],"related":[],"title":"Windows DNS: use-after-free lets a local user gain higher privileges","description":"Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.","summary":"A use-after-free bug in Windows DNS lets an attacker who already has authorized access on the machine raise their privileges. The attacker gets higher-level control of the affected Windows system.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","self-hosted","windows","windows-dns"],"not_affected_if":["no-local-untrusted-users"],"how_to_check":"- Check the Windows build and patch level with `winver` and compare against Microsoft's security update guide for this CVE\n- Confirm whether the server runs the DNS Server role (unknown from the sources)","fix":null,"status":"open","published_at":"2026-11-10T19:20:19+00:00","first_seen_at":"2026-11-10T19:25:04+00:00","triaged_at":"2026-11-10T19:40:09+00:00","updated_at":"2026-11-10T19:40:09+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T19:40:09Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows DNS: use-after-free lets a local user gain higher privileges","impact":"high","summary":"A use-after-free bug in Windows DNS lets an attacker who already has authorized access on the machine raise their privileges. The attacker gets higher-level control of the affected Windows system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","windows-dns","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated system privileges on Windows","analyst_note":"Find affected Windows builds and the Microsoft patch for CVE-2026-119953 in the Microsoft Security Update Guide; sources give no fixed version.","how_to_check":"- Check the Windows build and patch level with `winver` and compare against Microsoft's security update guide for this CVE\n- Confirm whether the server runs the DNS Server role (unknown from the sources)","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-untrusted-users"],"who_is_affected":"Windows systems running the DNS component, most relevant on DNS servers. The sources do not state affected builds or which configurations are exposed. Attackers must already have authorized local access, so systems without local user accounts exposed to untrusted people are lower risk.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000702,"input_tokens":4474,"output_tokens":510,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find affected Windows builds and the Microsoft patch for CVE-2026-119953 in the Microsoft Security Update Guide; sources give no fixed version.","search":"'-119953':16A,19A '-2026':15A,18A 'access':44B 'affect':60B 'allow':69C 'alreadi':41B 'attack':39B,52B,72C 'author':43B,71C 'bug':33B 'control':57B 'cve':14A,17A 'dns':2A,27B,36B,68C 'elev':74C 'free':6A,32B,65C 'gain':11A 'get':53B 'higher':12A,55B 'higher-level':54B 'host':23B 'infrastructur':20B 'let':7A,37B 'level':56B 'local':9A,76C 'machin':47B 'privileg':13A,50B,75C 'rais':48B 'self':22B 'self-host':21B 'system':62B 'use':4A,30B,63C 'use-after-fre':3A,29B 'user':10A 'window':1A,24B,26B,35B,61B,67C 'windows-dn':25B","nicknames":[],"mitigations":[],"who_affected":"Windows systems running the DNS component, most relevant on DNS servers. The sources do not state affected builds or which configurations are exposed. Attackers must already have authorized local access, so systems without local user accounts exposed to untrusted people are lower risk.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","selfhosted","windows","windowsdns"],"campaign_type":null,"search_a":"'-119953':16A,19A '-2026':15A,18A 'cve':14A,17A 'dns':2A 'free':6A 'gain':11A 'higher':12A 'let':7A 'local':9A 'privileg':13A 'use':4A 'use-after-fre':3A 'user':10A 'window':1A","search_b":"'access':44B 'affect':60B 'alreadi':41B 'attack':39B,52B 'author':43B 'bug':33B 'control':57B 'dns':27B,36B 'free':32B 'get':53B 'higher':55B 'higher-level':54B 'host':23B 'infrastructur':20B 'let':37B 'level':56B 'machin':47B 'privileg':50B 'rais':48B 'self':22B 'self-host':21B 'system':62B 'use':30B 'use-after-fre':29B 'window':24B,26B,35B,61B 'windows-dn':25B","search_c":"'allow':69C 'attack':72C 'author':71C 'dns':68C 'elev':74C 'free':65C 'local':76C 'privileg':75C 'use':63C 'window':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:19+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119953","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119953","severity":null,"published_at":"2026-11-10T19:20:19+00:00","modified_at":"2026-11-10T19:20:19+00:00","first_seen_at":"2026-11-10T19:25:04+00:00","fetched_at":"2026-11-10T19:25:04+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}