{"dataType":"CVE_RECORD","dataVersion":"5.0","cveMetadata":{"cveId":"GCVE-110-NCSC-2026-472","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-11-10T19:23:18Z","dateUpdated":"","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"nl","value":"An authentication bypass vulnerability in Windows Kerberos enables unauthorized attackers to elevate privileges over a network by exploiting alternate paths or channels.","supportingMedia":null},{"lang":"nl","value":"A double free vulnerability in Windows DNS allows an unauthorized attacker to remotely execute code over a network, posing a significant security risk.","supportingMedia":null},{"lang":"nl","value":"A vulnerability in Windows iSCSI involving an invalid pointer or reference allows unauthorized remote code execution over a network.","supportingMedia":null},{"lang":"nl","value":"An out-of-bounds read vulnerability in the Windows DHCP Server allows unauthorized remote code execution, posing a critical security risk.","supportingMedia":null},{"lang":"nl","value":"A stack-based buffer overflow vulnerability in Microsoft Windows DirectMusic allows remote attackers to execute arbitrary code over a network.","supportingMedia":null},{"lang":"nl","value":"A double free vulnerability in Microsoft Windows DirectMusic allows remote attackers to execute arbitrary code over a network, posing a critical security risk.","supportingMedia":null},{"lang":"nl","value":"A use-after-free vulnerability in the Windows Virtual Filtering Platform (VFP) allows unauthorized remote code execution over a network.","supportingMedia":null},{"lang":"nl","value":"An integer overflow or wraparound vulnerability in Microsoft Color Management enables unauthorized remote code execution.","supportingMedia":null},{"lang":"nl","value":"A heap-based buffer overflow vulnerability in Microsoft Color Management allows unauthorized remote code execution, posing a critical security risk.","supportingMedia":null},{"lang":"nl","value":"A heap-based buffer overflow vulnerability in Microsoft Windows Media Foundation allows remote attackers to execute arbitrary code over a network.","supportingMedia":null},{"lang":"nl","value":"A heap-based buffer overflow vulnerability in the Windows Xbox Live Networking Service enables unauthorized remote code execution over a network.","supportingMedia":null},{"lang":"nl","value":"An out-of-bounds write vulnerability in the Microsoft Windows Search Component allows unauthorized remote code execution over a network.","supportingMedia":null},{"lang":"nl","value":"A critical out-of-bounds write vulnerability in Windows LDAP enables unauthorized remote code execution over a network, posing significant security risks.","supportingMedia":null}],"references":[{"url":"https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0472.json","name":"","tags":["advisory"]},{"url":"https://portal.msrc.microsoft.com/en-us/security-guidance","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-85844.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-88218.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-88234.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-88243.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-95882.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-95901.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-95962.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-96067.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-96078.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-96157.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112967.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-116928.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-119958.json","name":"","tags":["advisory"]}],"metrics":[{"format":"","scenarios":null,"cvssV2_0":null,"cvssV3_0":null,"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C","baseScore":9,"baseSeverity":"CRITICAL"},"cvssV4_0":null,"other":null}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Authentication Bypass Using an Alternate Path or Channel","cweId":"CWE-288","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Double Free","cweId":"CWE-415","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Release of Invalid Pointer or Reference","cweId":"CWE-763","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Out-of-bounds Read","cweId":"CWE-125","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Stack-based Buffer Overflow","cweId":"CWE-121","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Use After Free","cweId":"CWE-416","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Integer Overflow or Wraparound","cweId":"CWE-190","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Heap-based Buffer Overflow","cweId":"CWE-122","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Out-of-bounds Write","cweId":"CWE-787","type":"CWE"}]}],"affected":[{"vendor":"Microsoft","product":"vers:unknown/*","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null,"x_vulnetix_aliases":{"direct":["CVE-2026-112967","CVE-2026-116928","CVE-2026-119958","CVE-2026-85844","CVE-2026-88218","CVE-2026-88234","CVE-2026-88243","CVE-2026-95882","CVE-2026-95901","CVE-2026-95962","CVE-2026-96067","CVE-2026-96078","CVE-2026-96157"]}},"adp":null}}