PULSEUnderground Intel

LIVE35signals / 24h

FEED

ransompanzer reclama a SUNNIER HOMES · Retail & E-Commerceransomn0n reclama a LiveRamp · US · Technologyransomn0n reclama a DraftKings · US · Retail & E-Commerceransominterlock reclama a Garden Valley School Division · CA · Educationransommedusalocker reclama a Capetownransombravox reclama a AWO Bundesverband · DE · Otherransomdark project reclama a MTM&O Gold Refinery DMCC · AE · Manufacturingransomdark project reclama a Bear Valley Community Hospital · US · Healthcareransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransompanzer reclama a SUNNIER HOMES · Retail & E-Commerceransomn0n reclama a LiveRamp · US · Technologyransomn0n reclama a DraftKings · US · Retail & E-Commerceransominterlock reclama a Garden Valley School Division · CA · Educationransommedusalocker reclama a Capetownransombravox reclama a AWO Bundesverband · DE · Otherransomdark project reclama a MTM&O Gold Refinery DMCC · AE · Manufacturingransomdark project reclama a Bear Valley Community Hospital · US · Healthcareransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Other

CVE WatchNov 10, 2026

CVE-2026-119907

Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally

CVSS

7.8

High

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-822

EPSS · 30d

Not enough EPSS history yet.

Technical description

Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119907

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-961687.0 HIG

——0Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.5h CVE-2026-961397.0 HIG

——0Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.5h CVE-2026-961247.0 HIG

——0Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.5h CVE-2026-961227.8 HIG

——0Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.5h CVE-2026-960737.0 HIG

——0Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.5h CVE-2026-960627.8 HIG

——0Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.5h