CVE Catalog
CVE-2026-70024
CriticalCVSS 9.8Summary
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code on the system, potentially leading to full system compromise or lateral movement.
Recommendation
Apply the latest security updates from Microsoft for Internet Information Services.
Other vulnerabilities in Windows Internet Information Services
Original NVD description (English source)
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

