CVE-2026-119957

Vendor

Microsoft

Product

Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation)

CVSS v3.1

7.8 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness

CWE-415

Exposure class

Operating system, Remote access

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 52
   CVE NVD 3h ago

   Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

   Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-119957 Microsoft
2. 34
   Qualys TRU Qualys 2h ago

   Microsoft Patch Tuesday, November 2026 Security Update Review

   As the year approaches its final stretch, Microsoft’s November 2026 Patch Tuesday highlights the continued importance of proactive vulnerability management. This month’s security updates address vulnerabilities across the…

   Fix available CVE-2026-124194CVE-2026-120003CVE-2026-118148+57 more Microsoft