{"history":[{"alert":0,"cve":"CVE-2026-113819","id":23102,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.0027, \"percentile\": 0.19428}"},{"alert":1,"cve":"CVE-2026-113819","id":21325,"kind":"cna","observed_at":1794500401,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-113819\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-11-10T20:08:53.270109Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T20:09:33.357Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 24H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26100.9974\", \"status\": \"affected\", \"version\": \"10.0.26100.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 25H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26200.9974\", \"status\": \"affected\", \"version\": \"10.0.26200.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 version 26H1\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.28000.3501\", \"status\": \"affected\", \"version\": \"10.0.28000.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 26H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26300.9974\", \"status\": \"affected\", \"version\": \"10.0.26300.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2025\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26100.33822\", \"status\": \"affected\", \"version\": \"10.0.26100.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2025 (Server Core installation)\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26100.33822\", \"status\": \"affected\", \"version\": \"10.0.26100.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.26300.9974\", \"versionStartIncluding\": \"10.0.26300.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.26100.33822\", \"versionStartIncluding\": \"10.0.26100.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.26200.9974\", \"versionStartIncluding\": \"10.0.26200.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.26100.9974\", \"versionStartIncluding\": \"10.0.26100.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.26100.33822\", \"versionStartIncluding\": \"10.0.26100.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"10.0.28000.3501\", \"versionStartIncluding\": \"10.0.28000.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2026-11-10T16:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 7, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-416\", \"description\": \"CWE-416: Use After Free\", \"lang\": \"en-US\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-12T15:44:07.158Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"Desktop Window Manager Elevation of Privilege Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113819\"}], \"title\": \"Desktop Window Manager Elevation of Privilege Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2026-113819\", \"datePublished\": \"2026-11-10T18:18:56.246Z\", \"dateReserved\": \"2026-10-20T18:55:01.740Z\", \"dateUpdated\": \"2026-11-12T15:44:07.158Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":1,"cve":"CVE-2026-113819","id":21056,"kind":"cna","observed_at":1794392402,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-113819\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-11-10T20:08:53.270109Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T20:09:33.357Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 24H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26100.9974\", \"status\": \"affected\", \"version\": \"10.0.26100.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 25H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26200.9974\", \"status\": \"affected\", \"version\": \"10.0.26200.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 version 26H1\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.28000.3501\", \"status\": \"affected\", \"version\": \"10.0.28000.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 26H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26300.9974\", \"status\": \"affected\", \"version\": \"10.0.26300.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2025\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26100.33822\", \"status\": \"affected\", \"version\": \"10.0.26100.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows Server 2025 (Server Core installation)\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26100.33822\", \"status\": \"affected\", \"version\": \"10.0.26100.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.26300.9974\", \"versionStartIncluding\": \"10.0.26300.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.26100.33822\", \"versionStartIncluding\": \"10.0.26100.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.26200.9974\", \"versionStartIncluding\": \"10.0.26200.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.26100.9974\", \"versionStartIncluding\": \"10.0.26100.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.26100.33822\", \"versionStartIncluding\": \"10.0.26100.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"10.0.28000.3501\", \"versionStartIncluding\": \"10.0.28000.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2026-11-10T16:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 7, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-416\", \"description\": \"CWE-416: Use After Free\", \"lang\": \"en-US\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T23:50:30.329Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"Desktop Window Manager Elevation of Privilege Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113819\"}], \"title\": \"Desktop Window Manager Elevation of Privilege Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2026-113819\", \"datePublished\": \"2026-11-10T18:18:56.246Z\", \"dateReserved\": \"2026-10-20T18:55:01.740Z\", \"dateUpdated\": \"2026-11-10T23:50:30.329Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-113819","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-11-10T20:08:53.270109Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-11-10T20:09:33.357Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2025 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.33822","status":"affected","version":"10.0.26100.0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.26300.9974","versionStartIncluding":"10.0.26300.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.26100.33822","versionStartIncluding":"10.0.26100.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*","versionEndExcluding":"10.0.26200.9974","versionStartIncluding":"10.0.26200.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*","versionEndExcluding":"10.0.26100.9974","versionStartIncluding":"10.0.26100.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.26100.33822","versionStartIncluding":"10.0.26100.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*","versionEndExcluding":"10.0.28000.3501","versionStartIncluding":"10.0.28000.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2026-11-10T16:00:00.000Z","descriptions":[{"lang":"en-US","value":"Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally."}],"metrics":[{"cvssV3_1":{"baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-416","description":"CWE-416: Use After Free","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-12T15:44:07.158Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"Desktop Window Manager Elevation of Privilege Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113819"}],"title":"Desktop Window Manager Elevation of Privilege Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2026-113819","datePublished":"2026-11-10T18:18:56.246Z","dateReserved":"2026-10-20T18:55:01.740Z","dateUpdated":"2026-11-12T15:44:07.158Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794500401,"cve":"CVE-2026-113819","description":"Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.","epss":{"date":"2026-11-12","epss":0.0027,"percentile":0.19428},"epss_checked":1794522003,"first_seen":1794378631,"kev":null,"kev_checked":1794522003,"products":"Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation)","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-113819"],"score":{"baseScore":7,"baseSeverity":"HIGH","provider":"microsoft","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Desktop Window Manager Elevation of Privilege Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://blog.talosintelligence.com/microsoft-patch-tuesday-for-november-2026/","id":418,"publisher":"Cisco Talos","title":"Microsoft Patch Tuesday for November 2026 \u2014 Snort rules and prominent vulnerabilities"},{"canonical_url":"https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day/","id":375,"publisher":"BleepingComputer","title":"Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day"}]}