CVE-2026-119972
Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.
CVSS
5.9
Medium
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-401
Not enough EPSS history yet.
Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-961767.5 HIG—
——0Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.4hCVE-2026-702407.5 HIG—
——0Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.4hCVE-2026-1199556.0 MED—
——0Uncontrolled resource consumption in Windows Hyper-V allows an authorized attacker to deny service locally.4hCVE-2026-1199095.9 MED—
——0Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.4hCVE-2026-1187396.5 MED—
——0Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.3hCVE-2026-1141547.5 HIG—
——0Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.3h