{"id":"CVE-2026-102225","published":"2026-10-13T19:17:48.117","lastModified":"2026-10-16T17:17:16.000","description":"Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-125","CWE-197"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102225","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability is an out-of-bounds read in Windows Text Shaping component that can be triggered over the network by unauthenticated attackers. The flaw allows remote code execution with high severity, making it a critical security issue.","exploitability":"Exploitation requires a network-based attack with minimal preconditions, as the vulnerability is accessible to unauthorized users without authentication.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on affected Windows systems with full system privileges, potentially leading to complete system compromise.","remediation":"Deploy the latest Windows updates containing the fix for CVE-2026-102225 immediately, as no specific version is mentioned in the description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","network"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:52:05.818Z"}}