CVE-2026-83770
CriticalCVSS 9.8Summary
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute malicious code, potentially leading to system takeover and data integrity compromise.
Recommendation
Install security updates for Windows Text Shaping and restrict access to text services.
Other vulnerabilities in Windows Text Shaping
See all- CVE-2026-97814Critical
Windows Text Shaping is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-102210Critical
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-69786High
A heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-69353Medium
An out-of-bounds read vulnerability in Windows Text Shaping allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS