{"id":"CVE-2026-102210","published":"2026-10-13T19:17:46.520","lastModified":"2026-10-16T17:17:14.007","description":"Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102210","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Text Shaping allows remote attackers to execute arbitrary code with high privileges. This vulnerability affects the rendering of text in Windows applications and can be exploited over a network without user interaction.","exploitability":"Exploitation is relatively straightforward requiring only network access to trigger the buffer overflow, with no authentication required and minimal preconditions for successful execution.","blast_radius":"The vulnerability could impact all Windows systems running affected text rendering components, potentially allowing attackers to gain full system compromise across enterprise networks with a single successful exploit.","remediation":"Apply the Windows Update KB5042819 or later which contains the fix for this heap-based buffer overflow in the text shaping engine.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","text-rendering","heap-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:47:31.102Z"}}