{"history":[{"alert":0,"cve":"CVE-2026-119889","id":23150,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00872, \"percentile\": 0.59369}"},{"alert":1,"cve":"CVE-2026-119889","id":21309,"kind":"cna","observed_at":1794500401,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-119889\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-11-10T19:08:59.182687Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T19:18:02.283Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Windows 10 Version 1607\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.14393.9688\", \"status\": \"affected\", \"version\": \"10.0.14393.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Windows 10 Version 1809\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.17763.9487\", \"status\": \"affected\", \"version\": \"10.0.17763.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 10 Version 21H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.19044.7846\", \"status\": \"affected\", \"version\": \"10.0.19044.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 10 Version 22H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.19045.7846\", \"status\": \"affected\", \"version\": \"10.0.19045.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\"], \"product\": \"Windows 11 version 23H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.22631.7711\", \"status\": \"affected\", \"version\": \"10.0.22631.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows 11 Version 23H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.22631.7711\", \"status\": \"affected\", \"version\": \"10.0.22631.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 24H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26100.9974\", \"status\": \"affected\", \"version\": \"10.0.26100.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 25H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26200.9974\", \"status\": \"affected\", \"version\": \"10.0.26200.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 version 26H1\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.28000.3501\", \"status\": \"affected\", \"version\": \"10.0.28000.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 26H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26300.9974\", \"status\": \"affected\", \"version\": \"10.0.26300.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\", \"versionEndExcluding\": \"10.0.14393.9688\", \"versionStartIncluding\": \"10.0.14393.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\", \"versionEndExcluding\": \"10.0.17763.9487\", \"versionStartIncluding\": \"10.0.17763.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*\", \"versionEndExcluding\": \"10.0.19044.7846\", \"versionStartIncluding\": \"10.0.19044.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*\", \"versionEndExcluding\": \"10.0.19045.7846\", \"versionStartIncluding\": \"10.0.19045.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.22631.7711\", \"versionStartIncluding\": \"10.0.22631.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"10.0.22631.7711\", \"versionStartIncluding\": \"10.0.22631.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.26100.9974\", \"versionStartIncluding\": \"10.0.26100.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.26200.9974\", \"versionStartIncluding\": \"10.0.26200.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.26300.9974\", \"versionStartIncluding\": \"10.0.26300.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.28000.3501\", \"versionStartIncluding\": \"10.0.28000.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2026-11-10T16:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network.\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-125\", \"description\": \"CWE-125: Out-of-bounds Read\", \"lang\": \"en-US\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-12T15:48:15.708Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"ActiveSyncProvider Information Disclosure Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119889\"}], \"title\": \"ActiveSyncProvider Information Disclosure Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2026-119889\", \"datePublished\": \"2026-11-10T18:23:13.816Z\", \"dateReserved\": \"2026-10-30T16:52:31.502Z\", \"dateUpdated\": \"2026-11-12T15:48:15.708Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":1,"cve":"CVE-2026-119889","id":21040,"kind":"cna","observed_at":1794392402,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-119889\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-11-10T19:08:59.182687Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T19:18:02.283Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Windows 10 Version 1607\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.14393.9688\", \"status\": \"affected\", \"version\": \"10.0.14393.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"x64-based Systems\"], \"product\": \"Windows 10 Version 1809\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.17763.9487\", \"status\": \"affected\", \"version\": \"10.0.17763.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 10 Version 21H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.19044.7846\", \"status\": \"affected\", \"version\": \"10.0.19044.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"32-bit Systems\", \"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 10 Version 22H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.19045.7846\", \"status\": \"affected\", \"version\": \"10.0.19045.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\"], \"product\": \"Windows 11 version 23H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.22631.7711\", \"status\": \"affected\", \"version\": \"10.0.22631.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"x64-based Systems\"], \"product\": \"Windows 11 Version 23H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.22631.7711\", \"status\": \"affected\", \"version\": \"10.0.22631.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 24H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26100.9974\", \"status\": \"affected\", \"version\": \"10.0.26100.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 25H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26200.9974\", \"status\": \"affected\", \"version\": \"10.0.26200.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 version 26H1\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.28000.3501\", \"status\": \"affected\", \"version\": \"10.0.28000.0\", \"versionType\": \"custom\"}]}, {\"platforms\": [\"ARM64-based Systems\", \"x64-based Systems\"], \"product\": \"Windows 11 Version 26H2\", \"vendor\": \"Microsoft\", \"versions\": [{\"lessThan\": \"10.0.26300.9974\", \"status\": \"affected\", \"version\": \"10.0.26300.0\", \"versionType\": \"custom\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*\", \"versionEndExcluding\": \"10.0.14393.9688\", \"versionStartIncluding\": \"10.0.14393.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*\", \"versionEndExcluding\": \"10.0.17763.9487\", \"versionStartIncluding\": \"10.0.17763.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*\", \"versionEndExcluding\": \"10.0.19044.7846\", \"versionStartIncluding\": \"10.0.19044.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*\", \"versionEndExcluding\": \"10.0.19045.7846\", \"versionStartIncluding\": \"10.0.19045.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.22631.7711\", \"versionStartIncluding\": \"10.0.22631.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*\", \"versionEndExcluding\": \"10.0.22631.7711\", \"versionStartIncluding\": \"10.0.22631.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.26100.9974\", \"versionStartIncluding\": \"10.0.26100.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.26200.9974\", \"versionStartIncluding\": \"10.0.26200.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.0.26300.9974\", \"versionStartIncluding\": \"10.0.26300.0\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*\", \"versionEndExcluding\": \"10.0.28000.3501\", \"versionStartIncluding\": \"10.0.28000.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"datePublic\": \"2026-11-10T16:00:00.000Z\", \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network.\"}], \"metrics\": [{\"cvssV3_1\": {\"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-125\", \"description\": \"CWE-125: Out-of-bounds Read\", \"lang\": \"en-US\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-10T23:54:48.821Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"ActiveSyncProvider Information Disclosure Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"], \"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119889\"}], \"title\": \"ActiveSyncProvider Information Disclosure Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2026-119889\", \"datePublished\": \"2026-11-10T18:23:13.816Z\", \"dateReserved\": \"2026-10-30T16:52:31.502Z\", \"dateUpdated\": \"2026-11-10T23:54:48.821Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-119889","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-10T19:08:59.182687Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-11-10T19:18:02.283Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"10.0.14393.9688","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"10.0.17763.9487","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 21H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19044.7846","status":"affected","version":"10.0.19044.0","versionType":"custom"}]},{"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 22H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.19045.7846","status":"affected","version":"10.0.19045.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 11 version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows 11 Version 23H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.22631.7711","status":"affected","version":"10.0.22631.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 24H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26100.9974","status":"affected","version":"10.0.26100.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 25H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26200.9974","status":"affected","version":"10.0.26200.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 version 26H1","vendor":"Microsoft","versions":[{"lessThan":"10.0.28000.3501","status":"affected","version":"10.0.28000.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems","x64-based Systems"],"product":"Windows 11 Version 26H2","vendor":"Microsoft","versions":[{"lessThan":"10.0.26300.9974","status":"affected","version":"10.0.26300.0","versionType":"custom"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","versionEndExcluding":"10.0.14393.9688","versionStartIncluding":"10.0.14393.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","versionEndExcluding":"10.0.17763.9487","versionStartIncluding":"10.0.17763.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*","versionEndExcluding":"10.0.19044.7846","versionStartIncluding":"10.0.19044.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*","versionEndExcluding":"10.0.19045.7846","versionStartIncluding":"10.0.19045.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*","versionEndExcluding":"10.0.22631.7711","versionStartIncluding":"10.0.22631.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*","versionEndExcluding":"10.0.22631.7711","versionStartIncluding":"10.0.22631.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*","versionEndExcluding":"10.0.26100.9974","versionStartIncluding":"10.0.26100.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*","versionEndExcluding":"10.0.26200.9974","versionStartIncluding":"10.0.26200.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*","versionEndExcluding":"10.0.26300.9974","versionStartIncluding":"10.0.26300.0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*","versionEndExcluding":"10.0.28000.3501","versionStartIncluding":"10.0.28000.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"datePublic":"2026-11-10T16:00:00.000Z","descriptions":[{"lang":"en-US","value":"Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network."}],"metrics":[{"cvssV3_1":{"baseScore":6.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","description":"CWE-125: Out-of-bounds Read","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-12T15:48:15.708Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"ActiveSyncProvider Information Disclosure Vulnerability","tags":["vendor-advisory","patch"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119889"}],"title":"ActiveSyncProvider Information Disclosure Vulnerability"}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2026-119889","datePublished":"2026-11-10T18:23:13.816Z","dateReserved":"2026-10-30T16:52:31.502Z","dateUpdated":"2026-11-12T15:48:15.708Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794500401,"cve":"CVE-2026-119889","description":"Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network.","epss":{"date":"2026-11-12","epss":0.00872,"percentile":0.59369},"epss_checked":1794522003,"first_seen":1794378631,"kev":null,"kev_checked":1794522003,"products":"Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows 11 Version 26H2","references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119889"],"score":{"baseScore":6.5,"baseSeverity":"MEDIUM","provider":"microsoft","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"ActiveSyncProvider Information Disclosure Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day/","id":375,"publisher":"BleepingComputer","title":"Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day"}]}