CVE WatchNov 10, 2026

CVE-2026-119882

Exposure of sensitive system information to an unauthorized control sphere in Windows Remote Desktop Services allows an authorized attacker

CVSS

5.3

Medium

EPSS

—

KEV

—

Exploit Today

0-100

Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-497

EPSS · 30d

Not enough EPSS history yet.

Technical description

Exposure of sensitive system information to an unauthorized control sphere in Windows Remote Desktop Services allows an authorized attacker to disclose information over a network.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119882

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-961375.5 MED

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information locally.4h CVE-2026-960015.5 MED

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information locally.4h CVE-2026-1199424.7 MED

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.4h CVE-2026-1198565.5 MED

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.3h CVE-2026-1198227.0 HIG

—

——0Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.3h CVE-2026-1181405.5 MED

—

——0Improper access control in Windows Server for NFS allows an authorized attacker to disclose information locally.3h