{"id":"CVE-2026-119958","published":"2026-11-10T19:20:19.857","lastModified":"2026-11-11T05:19:28.517","description":"Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-787"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119958","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An out-of-bounds write vulnerability exists in Windows LDAP, allowing an unauthenticated remote attacker to corrupt memory and potentially achieve remote code execution via a malicious LDAP request.","exploitability":"Exploitation is highly likely due to network accessibility (AV:N), low attack complexity (AC:L), and no required privileges or user interaction (PR:N, UI:N).","blast_radius":"Successful exploitation could lead to full system compromise of the affected Windows LDAP service host, enabling complete confidentiality, integrity, and availability loss.","remediation":"No fixed version is published in the provided description; apply Microsoft Security Advisory guidance immediately—disable LDAP over untrusted networks or restrict LDAP service access via firewall rules until patching is confirmed.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","ldap","memory-corruption","remote-exploit","windows"],"model":"garnet-coder","analyzedAt":"2026-11-11T09:50:53.481Z"}}