CVE-2026-70583
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could exploit this vulnerability to elevate privileges and gain full control over the system.
Recommendation
Apply Windows security updates to address this vulnerability.
Other vulnerabilities in Windows Core Messaging
See all- CVE-2026-83587High
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
- CVE-2026-69918High
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
- CVE-2026-70584High
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS