CVE-2026-85334
HighCVSS 7.5Summary
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Risk Assessment
An unauthenticated attacker could remotely read sensitive data from the service memory, potentially leading to leakage of confidential information.
Recommendation
Apply security updates and restrict network access to the Message Queuing service to only necessary hosts.
Other vulnerabilities in Windows Message Queuing Queue Manager
See all- CVE-2026-96921Medium
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally. The flaw involves incorrect interpretation of object types during data processing.
- CVE-2026-85860High
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS