CVE-2026-72944
HighCVSS 7.8Summary
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user can exploit this vulnerability to gain higher privileges, potentially leading to system takeover.
Recommendation
Install Windows security updates and restrict access to the Fax service to trusted users only.
Other vulnerabilities in Windows Fax Service
See all- CVE-2026-69621High
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69509High
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
- CVE-2023-35381High
A vulnerability in the Windows Fax Service allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2023-21694Medium
Remote code execution vulnerability in Windows Fax Service. An attacker could remotely execute arbitrary code on the vulnerable system.
Original NVD description (English source)
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.