Nov 2026: Windows Setup and Deployment Elevation of Privilege Vulnerability
CVE-2026-119914 Published on November 10, 2026
Windows Setup and Deployment Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
Vulnerability Analysis
Exploitation:
NONE
Automatable:
NO
Technical Impact:
TOTAL
Weakness Type
Improper Restriction of Communication Channel to Intended Endpoints
The software establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.
Products Associated with CVE-2026-119914
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
