Skip to content
Sign in
CVE-2026-1199589.8Critical

CVE-2026-119958: Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Microsoft · Windows 10 Version 1607

Vendor fix available · Affected: Microsoft Windows 10 Version 1607 · Exploitation: not established

Attention Covered by 3 outlets in the last 72 h.

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)

  1. In CISA KEV: not seen
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public: not seen
  5. Not establishedNothing in the sources we check

No EPSS score yet. The score appears once FIRST publishes it.

9.8CriticalCVSS
LowCrit.

DescriptionNVD

Out-of-bounds write in Windows LDAP Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

Coverage3 articles · 3 outlets

One row per outlet, in order of first report. First in our coverage: SANS ISC, 10 Nov.

Full timeline
Developinglatest 26 minutes ago3 articles3 outlets
10 Nov · SANS ISC firstNow
  • Tue 10 Nov, 21:00 UTC. SANS ISC, first report. Microsoft November 2027 update fixes 1,260 vulnerabilities.
  • Tue 10 Nov, 21:00 UTC. thezdi.com, its first report on the story. Adobe and Microsoft November updates fix over 1,200 flaws.
  • Tue 10 Nov, 23:31 UTC. Dark Reading, its first report on the story. Microsoft fixes 1,093 flaws as Outlook zero day remains active.
All coveragerunning total3SANS ISC1thezdi.com1Dark Reading1Now
  • First report
  • Article
  • Running total
Show as table
3 articles about CVE-2026-119958 from 3 outlets
Published (UTC)OutletHeadline
10 Nov 21:00SANS ISCMicrosoft November 2027 update fixes 1,260 vulnerabilities
10 Nov 21:00thezdi.comAdobe and Microsoft November updates fix over 1,200 flaws
10 Nov 23:31Dark ReadingMicrosoft fixes 1,093 flaws as Outlook zero day remains active
  1. Microsoft fixes 1,093 flaws as Outlook zero day remains active
    Dark Reading · mentions it in passing
  2. Adobe and Microsoft November updates fix over 1,200 flaws
    thezdi.com · mentions it in passing
  3. Microsoft November 2027 update fixes 1,260 vulnerabilities
    SANS ISC · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.

References

CyberSIXTSignal over noise
Updated AboutDevelopersSign in