CVE Catalog

CVE-2026-78459

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Summary

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.

Risk Assessment

Potential for arbitrary code execution in the context of the service, possibly leading to server compromise.

Recommendation

Install the latest security patches for IIS and monitor the system for unusual activity.

Other vulnerabilities in Windows Internet Information Services

See all
Original NVD description (English source)

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS