CVE-2026-119875
Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.
CVSS
4.0
Medium
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-197
Not enough EPSS history yet.
Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1209753.1 LOW—
——0On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certificate retrieval enabled, a malicious packet may cause the AutoCertMgmt process to be terminated unexpectedly. Managed X.509 certificates will not be renewed automatically and may eventually expire, potentially disrupting TLS-dependent services.10hCVE-2026-882137.8 HIG—
——0Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.5hCVE-2026-1199887.1 HIG—
——0Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.11hCVE-2026-1129817.8 HIG—
——0Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.9hCVE-2026-1127657.0 HIG—
——0Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.9hCVE-2026-1127545.5 MED—
——0Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.9h