CVE-2026-119392
A NVD · · CVE-2026-119392
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key metrics
- CVSS
- 8.8
- EPSS
- 0%
Key insight
The report provides no information beyond patch details about active exploitation, affected sectors, or specific attacker tactics.
Description
CVE-2026-119392 is a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller. According to the description, an unauthenticated attacker can exploit it over the network to elevate privileges. Affected are Windows systems with the Storage Spaces Controller; the NVD entry does not provide further version details or CVSS scores. The report does not mention active exploitation, a public proof of concept, or inclusion in CISA KEV.
Risk score
- cvss base
- 88.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 88.00
- industry weight
- 1.21
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- 0.00
Path: operational