CVE WatchNov 10, 2026

CVE-2026-119913

Improper link resolution before file access ('link following') in Windows Print Spooler Components allows an authorized attacker to elevate

CVSS

7.0

High

EPSS

—

KEV

—

Exploit Today

0-100

Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-59

EPSS · 30d

Not enough EPSS history yet.

Technical description

Improper link resolution before file access ('link following') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119913

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-959637.8 HIG

—

——0Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.4h CVE-2026-882247.0 HIG

—

——0Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.4h CVE-2026-1242247.0 HIG

—

——0Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally.4h CVE-2026-1221827.0 HIG

—

——0Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.4h CVE-2026-1221777.5 HIG

—

——0Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network.4h CVE-2026-1221747.0 HIG

—

——0Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.4h