CVE-2026-102210
CriticalCVSS 9.8Summary
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code, potentially leading to full system compromise.
Recommendation
Install the latest security updates from Microsoft.
Other vulnerabilities in Windows Text Shaping
See all- CVE-2026-97814Critical
Windows Text Shaping is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-83770Critical
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-69786High
A heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-69353Medium
An out-of-bounds read vulnerability in Windows Text Shaping allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS