{"id":"CVE-2026-119963","kind":"vulnerability","aliases":["CVE-2026-119963"],"related":[],"title":"Windows Message Queuing: double free lets unauthorized attacker run code remotely","description":"Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.","summary":"A double free bug in Windows Message Queuing lets an attacker send crafted network traffic that corrupts memory. Successful exploitation allows the attacker to execute code on the affected Windows machine without logging in.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","msmq","windows"],"not_affected_if":["msmq-not-installed"],"how_to_check":"- Check whether the Message Queuing (MSMQ) Windows feature is installed and running on the machine\n- Confirm the Windows build against Microsoft's advisory for CVE-2026-119963: unknown","fix":null,"status":"open","published_at":"2026-11-10T19:20:20+00:00","first_seen_at":"2026-11-10T19:25:05+00:00","triaged_at":"2026-11-10T19:34:40+00:00","updated_at":"2026-11-10T19:34:40+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T19:34:40Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Message Queuing: double free lets unauthorized attacker run code remotely","impact":"high","summary":"A double free bug in Windows Message Queuing lets an attacker send crafted network traffic that corrupts memory. Successful exploitation allows the attacker to execute code on the affected Windows machine without logging in.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","msmq"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker runs code on the Windows server over the network","analyst_note":"Check Microsoft's security update guide for CVE-2026-119963 for affected Windows builds, fixed updates and whether MSMQ is on by default.","how_to_check":"- Check whether the Message Queuing (MSMQ) Windows feature is installed and running on the machine\n- Confirm the Windows build against Microsoft's advisory for CVE-2026-119963: unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["msmq-not-installed"],"who_is_affected":"Windows systems with Message Queuing enabled and reachable over the network are the ones to examine. The sources do not state the exact versions or default configuration, so whether default installs are affected is unknown. Systems without Message Queuing installed are likely not affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000704,"input_tokens":4478,"output_tokens":513,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check Microsoft's security update guide for CVE-2026-119963 for affected Windows builds, fixed updates and whether MSMQ is on by default.","search":"'-119963':14A,17A '-2026':13A,16A 'affect':49B 'allow':41B,60C 'attack':8A,31B,43B,63C 'bug':24B 'code':10A,46B,66C 'corrupt':37B 'craft':33B 'cve':12A,15A 'doubl':4A,22B,54C 'execut':45B,65C 'exploit':40B 'free':5A,23B,55C 'infrastructur':18B 'let':6A,29B 'log':53B 'machin':51B 'memori':38B 'messag':2A,27B,58C 'msmq':19B 'network':34B,69C 'queu':3A,28B,59C 'remot':11A 'run':9A 'send':32B 'success':39B 'traffic':35B 'unauthor':7A,62C 'window':1A,20B,26B,50B,57C 'without':52B","nicknames":[],"mitigations":[],"who_affected":"Windows systems with Message Queuing enabled and reachable over the network are the ones to examine. The sources do not state the exact versions or default configuration, so whether default installs are affected is unknown. Systems without Message Queuing installed are likely not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","msmq","windows"],"campaign_type":null,"search_a":"'-119963':14A,17A '-2026':13A,16A 'attack':8A 'code':10A 'cve':12A,15A 'doubl':4A 'free':5A 'let':6A 'messag':2A 'queu':3A 'remot':11A 'run':9A 'unauthor':7A 'window':1A","search_b":"'affect':49B 'allow':41B 'attack':31B,43B 'bug':24B 'code':46B 'corrupt':37B 'craft':33B 'doubl':22B 'execut':45B 'exploit':40B 'free':23B 'infrastructur':18B 'let':29B 'log':53B 'machin':51B 'memori':38B 'messag':27B 'msmq':19B 'network':34B 'queu':28B 'send':32B 'success':39B 'traffic':35B 'window':20B,26B,50B 'without':52B","search_c":"'allow':60C 'attack':63C 'code':66C 'doubl':54C 'execut':65C 'free':55C 'messag':58C 'network':69C 'queu':59C 'unauthor':62C 'window':57C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:20+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119963","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119963","severity":null,"published_at":"2026-11-10T19:20:20+00:00","modified_at":"2026-11-10T19:20:20+00:00","first_seen_at":"2026-11-10T19:25:05+00:00","fetched_at":"2026-11-10T19:25:05+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}