CVE-2026-69353
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
An out-of-bounds read vulnerability in Windows Text Shaping allows an authorized attacker to disclose information locally.
Risk Assessment
The risk involves potential data leakage during text processing, which could compromise information confidentiality.
Recommendation
Update Windows and restrict access to text shaping functions for unauthorized users.
Other vulnerabilities in Windows Text Shaping
See all- CVE-2026-97814Critical
Windows Text Shaping is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-83770Critical
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-102210Critical
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-69786High
A heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS