Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How could an attacker exploit this vulnerability?
An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.
What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.
Security updates
10.0.26100.33822 — https://support.microsoft.com/help/5131080
10.0.26100.33730 — https://support.microsoft.com/help/5131077
10.0.28000.3501 — https://support.microsoft.com/help/5132059
10.0.14393.9688 — https://support.microsoft.com/help/5131291
10.0.17763.9487 — https://support.microsoft.com/help/5131085
10.0.19044.7846 — https://support.microsoft.com/help/5131096
10.0.20348.5870 — https://support.microsoft.com/help/5131090
10.0.22631.7711 — https://support.microsoft.com/help/5131087
10.0.26100.9974 — https://support.microsoft.com/help/5132061
10.0.26100.9911 — https://support.microsoft.com/help/5132043
Vulnerabilities 1
-
High 8.8
Windows Print Spooler Components Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.
Revision history
-
#1
Information published.
References
-
CVE-2026-119950 Windows Print Spooler Components Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119950
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss