{"id":"CVE-2026-119962","kind":"vulnerability","aliases":["CVE-2026-119962"],"related":[],"title":"Windows: double free in Cred SSProvider lets network attackers run code","description":"Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.","summary":"A double free bug in the Windows Cred SSProvider protocol handling lets an unauthenticated attacker send network traffic that runs code on the affected machine. The source reports a CVSS score of 8.1.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:20+00:00","first_seen_at":"2026-11-10T19:25:05+00:00","triaged_at":"2026-11-10T19:34:42+00:00","updated_at":"2026-11-10T19:34:42+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:34:42Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"network","title":"Windows: double free in Cred SSProvider lets network attackers run code","impact":"high","summary":"A double free bug in the Windows Cred SSProvider protocol handling lets an unauthenticated attacker send network traffic that runs code on the affected machine. The source reports a CVSS score of 8.1.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.4,"fix_status":"unknown","needs_auth":"no","worst_case":"Code runs on the Windows machine with no login needed","analyst_note":"Find Microsoft's advisory for CVE-2026-119962 to get affected Windows builds and the patch.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"The sources do not say which Windows versions or configurations are affected, or whether the protocol is enabled by default. Teams running Windows machines should check Microsoft's advisory for affected builds.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000648,"input_tokens":4490,"output_tokens":399,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find Microsoft's advisory for CVE-2026-119962 to get affected Windows builds and the patch.","search":"'-119962':14A,17A '-2026':13A,16A '8.1':52B 'affect':43B 'allow':60C 'attack':9A,34B,63C 'bug':23B 'code':11A,40B,66C 'cred':5A,27B,57C 'cve':12A,15A 'cvss':49B 'doubl':2A,21B,53C 'execut':65C 'free':3A,22B,54C 'handl':30B 'infrastructur':18B 'let':7A,31B 'machin':44B 'network':8A,36B,69C 'protocol':29B,59C 'report':47B 'run':10A,39B 'score':50B 'send':35B 'sourc':46B 'ssprovid':6A,28B,58C 'traffic':37B 'unauthent':33B 'unauthor':62C 'window':1A,19B,26B,56C","nicknames":[],"mitigations":[],"who_affected":"The sources do not say which Windows versions or configurations are affected, or whether the protocol is enabled by default. Teams running Windows machines should check Microsoft's advisory for affected builds.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","windows"],"campaign_type":null,"search_a":"'-119962':14A,17A '-2026':13A,16A 'attack':9A 'code':11A 'cred':5A 'cve':12A,15A 'doubl':2A 'free':3A 'let':7A 'network':8A 'run':10A 'ssprovid':6A 'window':1A","search_b":"'8.1':52B 'affect':43B 'attack':34B 'bug':23B 'code':40B 'cred':27B 'cvss':49B 'doubl':21B 'free':22B 'handl':30B 'infrastructur':18B 'let':31B 'machin':44B 'network':36B 'protocol':29B 'report':47B 'run':39B 'score':50B 'send':35B 'sourc':46B 'ssprovid':28B 'traffic':37B 'unauthent':33B 'window':19B,26B","search_c":"'allow':60C 'attack':63C 'code':66C 'cred':57C 'doubl':53C 'execut':65C 'free':54C 'network':69C 'protocol':59C 'ssprovid':58C 'unauthor':62C 'window':56C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:20+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119962","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119962","severity":null,"published_at":"2026-11-10T19:20:20+00:00","modified_at":"2026-11-10T19:20:20+00:00","first_seen_at":"2026-11-10T19:25:05+00:00","fetched_at":"2026-11-10T19:25:05+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}