CVE Catalog
CVE-2026-70093
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.34%
26th percentile - higher than 26% of all known CVEs
Summary
Heap-based buffer overflow in the Windows Rich Text Edit Control. An authorized attacker can elevate privileges locally.
Risk Assessment
Local privilege escalation may allow an attacker to execute code with higher privileges, for example after opening a crafted document.
Recommendation
Install Microsoft updates for the Rich Text Edit Control and exercise caution when opening untrusted RTF documents.
Other vulnerabilities in Windows Rich Text Edit Control
Original NVD description (English source)
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS