CVE Catalog

CVE-2026-50447

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.91%

56th percentile - higher than 56% of all known CVEs

Summary

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Risk Assessment

An attacker can remotely execute malicious code on a server running MSMQ, leading to system takeover.

Recommendation

Install the security patch from Microsoft for Windows Message Queuing.

Original NVD description (English source)

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS