CVE-2026-33838
HighSummary
CVE-2026-33838 is a vulnerability related to double free in Windows Message Queuing, allowing an authorized attacker to elevate privileges locally.
Risk Assessment
This threat could lead to unauthorized access to system resources, jeopardizing the integrity and confidentiality of data within the organization.
Recommendation
It is recommended to update Windows to the latest version to mitigate this vulnerability and to monitor system logs for potential attack attempts.
Other vulnerabilities in Windows Message Queuing
See all- CVE-2026-85874High
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
- CVE-2026-34329High
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-100202Critical
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
- CVE-2026-69579Critical
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-50447Critical
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-83997High
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-72932High
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
- CVE-2026-69645High
Use-after-free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- CVE-2026-68887High
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
- CVE-2026-65790High
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS