All advisories
CVE-2026-119918Medium · 6.8
CVE-2026-119918
Microsoft / Windows 10 Version 1607
Official facts
- CVE published
- 10/11/2026
- Added to CISA KEV
- —
- EPSS · 14/11/2026
- 0.45%
- Confirmed exploitation
- Unknown
Original description
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
Source material is displayed in its original language. EPSS estimates exploitation probability over the next 30 days; it is not evidence of an attack. An unknown score is not a low score.
Source-recommended action
Consult the official advisory and vendor instructions before applying mitigations.
Applicability depends on product, version and configuration. Verify affected versions using the official references.