All advisories
CVE-2026-119910Medium · 4.7
CVE-2026-119910
Microsoft / Windows 10 Version 1607
Official facts
- CVE published
- 10/11/2026
- Added to CISA KEV
- —
- EPSS · 14/11/2026
- 0.25%
- Confirmed exploitation
- Unknown
Original description
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to disclose information locally.
Source material is displayed in its original language. EPSS estimates exploitation probability over the next 30 days; it is not evidence of an attack. An unknown score is not a low score.
Source-recommended action
Consult the official advisory and vendor instructions before applying mitigations.
Applicability depends on product, version and configuration. Verify affected versions using the official references.