CVE-2026-119839: Windows Remote Desktop Client Elevation of Privilege Vulnerability
Published Nov 10, 2026
·Updated
Untrusted search path in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.
Other sources
Windows Remote Desktop Client Elevation of Privilege Vulnerability
— Microsoft
Affected Software
12 affected componentsFixes available
Microsoft Windows Server 2025<10.0.26100.33822, <10.0.26100.33730
10.0.26100.3382210.0.26100.33730
Microsoft Windows Server 2025<10.0.26100.33822, <10.0.26100.33730
10.0.26100.3382210.0.26100.33730
Microsoft Windows 11=25H2, >=10.0.26200<10.0.26200.9974, >=10.0.26200<10.0.26200.9911
10.0.26200.997410.0.26200.9911
Microsoft Windows 11=26H2, >=10.0.26300<10.0.26300.9974, >=10.0.26300<10.0.26300.9911
10.0.26300.997410.0.26300.9911
Microsoft Windows 11=26H2, >=10.0.26300<10.0.26300.9974, >=10.0.26300<10.0.26300.9911
10.0.26300.997410.0.26300.9911
Microsoft Windows 11=25H2, >=10.0.26200<10.0.26200.9974, >=10.0.26200<10.0.26200.9911
10.0.26200.997410.0.26200.9911
Microsoft Windows 11=24H2, >=10.0.26100<10.0.26100.9974, >=10.0.26100<10.0.26100.9911
10.0.26100.997410.0.26100.9911
Microsoft Windows 11=23H2, >=10.0.22631<10.0.22631.7711
10.0.22631.7711
Microsoft Windows 11=26H1, >=10.0.28000<10.0.28000.3501
10.0.28000.3501
Microsoft Windows 11=24H2, >=10.0.26100<10.0.26100.9974, >=10.0.26100<10.0.26100.9911
10.0.26100.997410.0.26100.9911
Microsoft Windows 11=23H2, >=10.0.22631<10.0.22631.7711
10.0.22631.7711
Microsoft Windows 11=26H1, >=10.0.28000<10.0.28000.3501
10.0.28000.3501
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33822Fixed in 10.0.26100.33730Patch KB5131077 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26300.9974Fixed in 10.0.26300.9911Patch KB5132043 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9974Fixed in 10.0.26200.9911Patch KB5132043 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3501Patch KB5132059 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9974Fixed in 10.0.26100.9911Patch KB5132043 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7711Patch KB5131087
Event History
Nov 10, 2026
CVE Published
via Microsoft·04:00 PM
Data Sourced
via Microsoft·04:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·04:00 PM
Affected Software
CVE Published
via MITRE·06:22 PM
Data Sourced
via MITRE·06:22 PM
DescriptionSeverity
Data Sourced
via NVD·07:20 PM
DescriptionSeverityWeakness