CVE-2026-68887
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
Risk Assessment
Risk of service disruption for MSMQ, potentially affecting applications relying on message queuing.
Recommendation
Apply security updates for Windows Message Queuing and restrict network access to the service.
Other vulnerabilities in Windows Message Queuing
See all- CVE-2026-34329High
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-33838High
CVE-2026-33838 is a vulnerability related to double free in Windows Message Queuing, allowing an authorized attacker to elevate privileges locally.
- CVE-2026-100202Critical
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
- CVE-2026-69579Critical
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-50447Critical
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-85874High
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
- CVE-2026-85859Medium
A null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.
- CVE-2026-108460High
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-83997High
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-72932High
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS