Windows Function Discovery Resource Publication
by Microsoft
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-119907 | Hig | 0.51 | 7.8 | — | Nov 10, 2026 | Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-125134 | Hig | 0.49 | 7.5 | — | Nov 10, 2026 | Use after free in Windows Function Discovery Resource Publication allows an unauthorized attacker to execute code over an adjacent network. |
- risk 0.51cvss 7.8epss —
Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally.
- risk 0.49cvss 7.5epss —
Use after free in Windows Function Discovery Resource Publication allows an unauthorized attacker to execute code over an adjacent network.