CVE-2025-26634
CVSS 3.1 Score 7.5 of 10 (high)
Confidentiality high
Integrity high
Availability high
Attack Complexity high
Privileges Required low
Scope unchanged
Details
Published Mar 11, 2025
CWE ID 122
Summary
CVE-2025-26634 is a critical vulnerability affecting Windows Core Messaging. This issue involves a heap-based buffer overflow, which can be exploited by an attacker who has already gained authorized network access. By sending specially crafted messages to a vulnerable system, the attacker can cause the buffer to overflow, resulting in unintended code execution and potential privilege escalation. This vulnerability poses a significant risk to systems that rely on Windows Core Messaging and have not been appropriately patched.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows 10
- Microsoft Windows 11
- Microsoft Windows Server 2022
Affected Vendors
- Microsoft