All advisories
CVE-2026-119909Medium · 5.9
CVE-2026-119909
Microsoft / Windows 10 Version 1607
Official facts
- CVE published
- 10/11/2026
- Added to CISA KEV
- —
- EPSS · 14/11/2026
- 0.87%
- Confirmed exploitation
- Unknown
Original description
Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
Source material is displayed in its original language. EPSS estimates exploitation probability over the next 30 days; it is not evidence of an attack. An unknown score is not a low score.
Source-recommended action
Consult the official advisory and vendor instructions before applying mitigations.
Applicability depends on product, version and configuration. Verify affected versions using the official references.