Every CVE Search/ Get API key

CVE-2026-119965

Windows Kernel Elevation of Privilege Vulnerability

6.4 Medium

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

What each source reports

CVE List Score used 6.4

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Record
CVE-2026-119965
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Weakness
CWE-416
Updated
2026-11-10
EUVDEUVD-2026-122457 6.4

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Record
EUVD-2026-122457
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Updated
2026-11-10
GitHub AdvisoriesGHSA-6qqf-fmfv-cvcv 6.4

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Record
GHSA-6qqf-fmfv-cvcv
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-10
NVD 6.4

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Record
CVE-2026-119965
CVSS 3.1
6.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-10

Affected products

History

History
RecordedChangedSources
aliases, referencesGitHub Advisories
cwes, references, severity, titleCVE List
first indexedEUVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-119965 is a medium vulnerability (CVSS 6.4) in Microsoft Windows 11 Version 23h2, published November 10, 2026. No source lists public exploit code. No source names a fixed version.

References

MoveEnter Open