CVE Catalog
CVE-2026-78459
HighCVSS 7.8Summary
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
Risk Assessment
Potential for arbitrary code execution in the context of the service, possibly leading to server compromise.
Recommendation
Install the latest security patches for IIS and monitor the system for unusual activity.
Other vulnerabilities in Windows Internet Information Services
See allOriginal NVD description (English source)
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

