CVE-2026-72932
HighCVSS 7.5Summary
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Risk Assessment
An unauthorized attacker can remotely access sensitive data, potentially leading to information leakage and privacy breach.
Recommendation
Install Windows security updates and restrict access to the MSMQ service to trusted clients only.
Other vulnerabilities in Windows Message Queuing
See all- CVE-2026-83997High
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-69645High
Use-after-free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- CVE-2026-34329High
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-33838High
CVE-2026-33838 is a vulnerability related to double free in Windows Message Queuing, allowing an authorized attacker to elevate privileges locally.
- CVE-2026-69579Critical
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-50447Critical
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-65790High
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- CVE-2026-62719High
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- CVE-2026-62717High
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- CVE-2026-50505High
A use-after-free vulnerability in Windows Message Queuing allows an authorized attacker to execute code remotely.
Original NVD description (English source)
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.