CVE-2026-119966
Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVSS
7.5
High
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-190
Not enough EPSS history yet.
Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-595827.5 HIG—
——0In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.5hCVE-2026-969826.8 MED—
——0Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.5hCVE-2026-969796.8 MED—
——0Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.5hCVE-2026-969746.8 MED—
——0Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.5hCVE-2026-961347.5 HIG—
——0Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.4hCVE-2026-960679.8 CRI—
——0Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.10h