CVE Catalog
CVE-2026-69438
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk0.72%
52th percentile - higher than 52% of all known CVEs
Summary
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute malicious code, potentially leading to system takeover and data theft.
Recommendation
Install the latest security updates for Microsoft JScript and consider disabling it if not needed.
Other vulnerabilities in Microsoft JScript
Original NVD description (English source)
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS