CVE Watch10 de nov. de 2026

CVE-2026-119913

Improper link resolution before file access ('link following') in Windows Print Spooler Components allows an authorized attacker to elevate

CVSS

7.0

Alta

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-59

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Improper link resolution before file access ('link following') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Referências oficiais

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119913

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-959637.8 ALT

—

——0Improper link resolution before file access ('link following') in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.4h CVE-2026-882247.0 ALT

—

——0Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.4h CVE-2026-1242247.0 ALT

—

——0Improper link resolution before file access ('link following') in Windows PowerShell allows an authorized attacker to elevate privileges locally.4h CVE-2026-1221827.0 ALT

—

——0Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.4h CVE-2026-1221777.5 ALT

—

——0Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network.4h CVE-2026-1221747.0 ALT

—

——0Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.4h