PULSE
FEED
ransompanzer reclama a SUNNIER HOMES · Retail & E-Commerceransomn0n reclama a LiveRamp · US · Technologyransomn0n reclama a DraftKings · US · Retail & E-Commerceransominterlock reclama a Garden Valley School Division · CA · Educationransommedusalocker reclama a Capetownransombravox reclama a AWO Bundesverband · DE · Otherransomdark project reclama a MTM&O Gold Refinery DMCC · AE · Manufacturingransomdark project reclama a Bear Valley Community Hospital · US · Healthcareransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransompanzer reclama a SUNNIER HOMES · Retail & E-Commerceransomn0n reclama a LiveRamp · US · Technologyransomn0n reclama a DraftKings · US · Retail & E-Commerceransominterlock reclama a Garden Valley School Division · CA · Educationransommedusalocker reclama a Capetownransombravox reclama a AWO Bundesverband · DE · Otherransomdark project reclama a MTM&O Gold Refinery DMCC · AE · Manufacturingransomdark project reclama a Bear Valley Community Hospital · US · Healthcareransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Other
← Todos os CVEs
CVE Watch10 de nov. de 2026

CVE-2026-119817

Double free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVSS

7.8

Alta

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-415

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Double free in Windows Shell allows an authorized attacker to elevate privileges locally.

Referências oficiais
CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-969697.0 ALT
—
——0Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.5h
CVE-2026-961158.0 ALT
—
——0Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.4h
CVE-2026-959617.0 ALT
—
——0Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.5h
CVE-2026-959347.8 ALT
—
——0Double free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.5h
CVE-2026-959019.8 CRÍ
—
——0Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.10h
CVE-2026-882189.8 CRÍ
—
——0Double free in Windows DNS allows an unauthorized attacker to execute code over a network.10h