CVE-2026-119883

EUVD-2026-122391
Improper authorization in Data Deduplication allows an authorized attacker to bypass a security feature locally.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 LOW
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Windows Releases
Platform
Version
Windows Server 2016
Server Core
KB5131291
Standard
KB5131291
Windows Server 2019
Server Core
KB5131085
Standard
KB5131085
Windows Server 2022
Server Core
KB5131090
Standard
KB5131090
Windows Server 2025
Server Core
KB5131080
Standard
KB5131080
Vulnerability Media Exposure
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-119883