CVE-2026-119906: Windows Sandbox Elevation of Privilege Vulnerability

Q: Who can exploit this issue?

An attacker must already be authorized on the affected system and able to act locally. The provided data does not indicate that remote exploitation or user interaction is required.

Q: What is the likely impact of successful exploitation?

Successful exploitation allows local privilege elevation. The severity vector indicates high impact to confidentiality, integrity, and availability.

Q: What component should be prioritized for remediation?

Prioritize systems with Microsoft Windows Sandbox installed or enabled, as this is the affected component identified in the provided data. The provided information does not include affected versions, fixed versions, or temporary mitigations.

Published Nov 10, 2026

Updated

Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to elevate privileges locally.

Other sources

Windows Sandbox Elevation of Privilege Vulnerability

— Microsoft

Affected Software

1 affected componentFixes available

Microsoft Windows Sandbox<0.8.111.0

0.8.111.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 0.8.111.0

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·04:00 PM

Affected Software

CVE Published

via MITRE·06:23 PM

Data Sourced

via MITRE·06:23 PM

DescriptionSeverity

Data Sourced

via NVD·07:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker must already be authorized on the affected system and able to act locally. The provided data does not indicate that remote exploitation or user interaction is required.

What is the likely impact of successful exploitation?

Successful exploitation allows local privilege elevation. The severity vector indicates high impact to confidentiality, integrity, and availability.

What component should be prioritized for remediation?

Prioritize systems with Microsoft Windows Sandbox installed or enabled, as this is the affected component identified in the provided data. The provided information does not include affected versions, fixed versions, or temporary mitigations.

CVE-2026-119906: Windows Sandbox Elevation of Privilege Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact of successful exploitation?

What component should be prioritized for remediation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact of successful exploitation?

What component should be prioritized for remediation?