CVE-2026-69786
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute code on the victim's machine, potentially leading to full system compromise.
Recommendation
Install the latest security updates for Windows.
Other vulnerabilities in Windows Text Shaping
See all- CVE-2026-97814Critical
Windows Text Shaping is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-83770Critical
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-102210Critical
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-69353Medium
An out-of-bounds read vulnerability in Windows Text Shaping allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS