Vulnerabilities

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Microsoft

Product

Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2

CVSS v3.1

7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation

SSVC none, automatable no, impact total

Weakness

CWE-122

Exposure class

Operating system

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-119382 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 34
   Qualys TRU Qualys 2h ago

   Microsoft Patch Tuesday, November 2026 Security Update Review

   Fix available CVE-2026-124194CVE-2026-120003CVE-2026-118148+57 more Microsoft
2. 46
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-119847 Microsoft
3. 39
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-119834 Microsoft
4. 39
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-119831 Microsoft
5. 39
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-119816 Microsoft
6. 39
   CVE NVD 3h ago

   Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

   CVSS 8.8 CVE-2026-118283 Microsoft
7. 39
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-118280 Microsoft
8. 39
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

   CVSS 8.8 CVE-2026-118279 Microsoft
9. 39
   CVE NVD 3h ago

   Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

   CVSS 8.8 CVE-2026-118277 Microsoft
10. 39
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 8.8 CVE-2026-118229 Microsoft
11. 39
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 8.8 CVE-2026-118228 Microsoft
12. 39
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 8.8 CVE-2026-118227 Microsoft
13. 39
    CVE NVD 3h ago

    Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 8.8 CVE-2026-118226 Microsoft
14. 39
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-118222 Microsoft
15. 39
    CVE NVD 3h ago

    Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 8.8 CVE-2026-118221 Microsoft