CVE-2026-102225
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Risk Assessment
The vulnerability can be exploited without authentication to achieve remote code execution, posing a high risk of system compromise.
Recommendation
Immediately apply security updates for Windows and consider limiting exposure of services vulnerable to network attacks.
Other vulnerabilities in Windows Text Shaping
See all- CVE-2026-97814Critical
Windows Text Shaping is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-83770Critical
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-102210Critical
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-69786High
A heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-69353Medium
An out-of-bounds read vulnerability in Windows Text Shaping allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS