All advisories
CVE-2026-119908High · 8.8
CVE-2026-119908
Microsoft / Windows 11 version 23H2
Official facts
- CVE published
- 10/11/2026
- Added to CISA KEV
- —
- EPSS · 14/11/2026
- 0.78%
- Confirmed exploitation
- Unknown
Original description
Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.
Source material is displayed in its original language. EPSS estimates exploitation probability over the next 30 days; it is not evidence of an attack. An unknown score is not a low score.
Source-recommended action
Consult the official advisory and vendor instructions before applying mitigations.
Applicability depends on product, version and configuration. Verify affected versions using the official references.