---
id: "CVE-2026-119972"
page: "https://infrastack.ai/live/CVE-2026-119972"
kind: "vulnerability"
aliases: ["CVE-2026-119972"]
title: "Windows RPC: uncontrolled resource use lets an attacker crash services over the network"
severity: "medium"
cvss: 5.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "rpc", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:20:22+00:00"
first_seen_at: "2026-11-10T19:25:06+00:00"
updated_at: "2026-11-10T19:59:59+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119972", "first_seen_at": "2026-11-10T19:25:06+00:00"}]
exploit_sources: []
---

# Windows RPC: uncontrolled resource use lets an attacker crash services over the network

Link for people: https://infrastack.ai/live/CVE-2026-119972 (this .md is for agents)

Windows Remote Procedure Call does not limit resource consumption, so an unauthorized attacker on the network can exhaust resources and deny service. The sources give no further detail on the trigger or affected builds.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:06+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119972

## From the sources

Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_