Skip to content

CVE record · 2 sources

CVE-2026-119886

CVSS 7.8

Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Vendor: Microsoft
Product: Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2
CVSS v3.1: 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-306
Exposure class: Operating system

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

62

Tenable research Tenable 4h ago

Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

63 Critical 1029 Important 1 Moderate 0 Low Microsoft addresses 1093 CVEs in the eleventh Patch Tuesday of 2026. Microsoft patched 1093 CVEs in its November 2026 Patch Tuesday release, with 63 rated critical, 1029 rated as…

Exploited CVSS 6.5 Fix available CVE-2026-124194 CVE-2026-118146 CVE-2026-120002+17 more Microsoft
39

CVE NVD 4h ago

Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-119886 Microsoft