pwned.coffeeUpdated 23 min ago

Today's specials

pwned.coffeeOrder ticket · today's special · 12 Nov 2026

Double espresso · 355°CcriticalOrder up · fix available

Windows: memory corruption

Windows

Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

Do this now

Apply the Windows fix for builds 10.0.14393.9688, 10.0.17763.9487, 10.0.19044.7846, +8 more lines in Fix it.

Who should check: teams running Windows

Fix it

Windows 10 Version 1607

  • Upgrade to Windows 10 Version 1607 10.0.14393.9688

Windows 10 Version 1809

  • Upgrade to Windows 10 Version 1809 10.0.17763.9487

Windows 10 Version 21H2

  • Upgrade to Windows 10 Version 21H2 10.0.19044.7846

Windows 10 Version 22H2

  • Upgrade to Windows 10 Version 22H2 10.0.19045.7846

Windows 11 version 23H2

  • Upgrade to Windows 11 version 23H2 10.0.22631.7711

Windows 11 Version 24H2

  • Upgrade to Windows 11 Version 24H2 10.0.26100.9974

Windows 11 Version 25H2

  • Upgrade to Windows 11 Version 25H2 10.0.26200.9974

Windows 11 version 26H1

  • Upgrade to Windows 11 version 26H1 10.0.28000.3501

Windows 11 Version 26H2

  • Upgrade to Windows 11 Version 26H2 10.0.26300.9974

Windows Server 2016

  • Upgrade to Windows Server 2016 10.0.14393.9688

Windows Server 2016 (Server Core installation)

  • Upgrade to Windows Server 2016 (Server Core installation) 10.0.14393.9688

Windows Server 2019

  • Upgrade to Windows Server 2019 10.0.17763.9487

Windows Server 2019 (Server Core installation)

  • Upgrade to Windows Server 2019 (Server Core installation) 10.0.17763.9487

Windows Server 2022

  • Upgrade to Windows Server 2022 10.0.20348.5870

Windows Server 2025

  • Upgrade to Windows Server 2025 10.0.26100.33822

Windows Server 2025 (Server Core installation)

  • Upgrade to Windows Server 2025 (Server Core installation) 10.0.26100.33822
First seen
Last update
Fixed in
  • Windows 10 Version 1607 10.0.14393.9688
  • Windows 10 Version 1809 10.0.17763.9487
  • Windows 10 Version 21H2 10.0.19044.7846
  • Windows 10 Version 22H2 10.0.19045.7846
  • Windows 11 version 23H2 10.0.22631.7711
  • Windows 11 Version 24H2 10.0.26100.9974
  • Windows 11 Version 25H2 10.0.26200.9974
  • Windows 11 version 26H1 10.0.28000.3501
  • Windows 11 Version 26H2 10.0.26300.9974
  • Windows Server 2022 10.0.20348.5870
  • Windows Server 2025 10.0.26100.33822
Identifiers
CVSS
9.8
Source
news
On the menu as

Timeline

  1. Fix status: unknown → patched.

  2. First reported.

Receipt

Exploitation
No known exploitation
Fix by release line
ProductAffectedFixed inSource
Windows 10 Version 160710.0.14393.0 to before 10.0.14393.968810.0.14393.9688CVE record (CNA) checked
Windows 10 Version 180910.0.17763.0 to before 10.0.17763.948710.0.17763.9487CVE record (CNA) checked
Windows 10 Version 21H210.0.19044.0 to before 10.0.19044.784610.0.19044.7846CVE record (CNA) checked
Windows 10 Version 22H210.0.19045.0 to before 10.0.19045.784610.0.19045.7846CVE record (CNA) checked
Windows 11 version 23H210.0.22631.0 to before 10.0.22631.771110.0.22631.7711CVE record (CNA) checked
Windows 11 Version 24H210.0.26100.0 to before 10.0.26100.997410.0.26100.9974CVE record (CNA) checked
Windows 11 Version 25H210.0.26200.0 to before 10.0.26200.997410.0.26200.9974CVE record (CNA) checked
Windows 11 version 26H110.0.28000.0 to before 10.0.28000.350110.0.28000.3501CVE record (CNA) checked
Windows 11 Version 26H210.0.26300.0 to before 10.0.26300.997410.0.26300.9974CVE record (CNA) checked
Windows Server 201610.0.14393.0 to before 10.0.14393.968810.0.14393.9688CVE record (CNA) checked
Windows Server 2016 (Server Core installation)10.0.14393.0 to before 10.0.14393.968810.0.14393.9688CVE record (CNA) checked
Windows Server 201910.0.17763.0 to before 10.0.17763.948710.0.17763.9487CVE record (CNA) checked
Score
CVSS 9.8 (critical). CVSS 3.1 9.8 (CNA microsoft) for CVE-2026-119958
Last checked

Sources: KEV – CVE record ✓ Vendor ✓

Sources

Totalone very hot coffee