{"id":"CVE-2026-119959","kind":"vulnerability","aliases":["CVE-2026-119959"],"related":[],"title":"Improper access control in Windows Hyper-V allows an authorized attacker to perform spoofing locally","description":"Improper access control in Windows Hyper-V allows an authorized attacker to perform spoofing locally.","summary":null,"severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":[],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:20+00:00","first_seen_at":"2026-11-10T19:25:05+00:00","triaged_at":null,"updated_at":"2026-11-10T19:39:26+00:00","category":null,"confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-119959':19A,22A '-2026':18A,21A 'access':2A,24C 'allow':9A,31C 'attack':12A,34C 'author':11A,33C 'control':3A,25C 'cve':17A,20A 'hyper':7A,29C 'hyper-v':6A,28C 'improp':1A,23C 'local':16A,38C 'perform':14A,36C 'spoof':15A,37C 'v':8A,30C 'window':5A,27C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium"],"campaign_type":null,"search_a":"'-119959':19A,22A '-2026':18A,21A 'access':2A 'allow':9A 'attack':12A 'author':11A 'control':3A 'cve':17A,20A 'hyper':7A 'hyper-v':6A 'improp':1A 'local':16A 'perform':14A 'spoof':15A 'v':8A 'window':5A","search_b":"","search_c":"'access':24C 'allow':31C 'attack':34C 'author':33C 'control':25C 'hyper':29C 'hyper-v':28C 'improp':23C 'local':38C 'perform':36C 'spoof':37C 'v':30C 'window':27C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:20+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119959","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119959","severity":null,"published_at":"2026-11-10T19:20:20+00:00","modified_at":"2026-11-10T19:20:20+00:00","first_seen_at":"2026-11-10T19:25:05+00:00","fetched_at":"2026-11-10T19:25:05+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}