All advisories
CVE-2026-119900High · 7.3
CVE-2026-119900
Microsoft / Windows 10 Version 1607
Official facts
- CVE published
- 10/11/2026
- Added to CISA KEV
- —
- EPSS · 14/11/2026
- 0.43%
- Confirmed exploitation
- Unknown
Original description
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Source material is displayed in its original language. EPSS estimates exploitation probability over the next 30 days; it is not evidence of an attack. An unknown score is not a low score.
Source-recommended action
Consult the official advisory and vendor instructions before applying mitigations.
Applicability depends on product, version and configuration. Verify affected versions using the official references.