CVE-2026-54992
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
A heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.
Risk Assessment
An attacker could gain full control of the system, leading to compromise of data confidentiality, integrity, and availability.
Recommendation
Apply the security update provided by the vendor immediately and restrict access to the Message Queuing service to trusted users only.
Other vulnerabilities in Windows Message Queuing
See all- CVE-2026-34329High
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-33838High
CVE-2026-33838 is a vulnerability related to double free in Windows Message Queuing, allowing an authorized attacker to elevate privileges locally.
- CVE-2026-50447Critical
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-65790High
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- CVE-2026-62719High
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- CVE-2026-62717High
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- CVE-2026-50505High
A use-after-free vulnerability in Windows Message Queuing allows an authorized attacker to execute code remotely.
Original NVD description (English source)
Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.