{"id":"CVE-2026-70024","published":"2026-10-13T19:19:13.487","lastModified":"2026-10-16T19:11:29.077","description":"Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-20","CWE-121"],"vendors":["microsoft"],"products":["windows 10 1607","windows 10 1809","windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2012","windows server 2016","windows server 2019"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70024","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in Windows IIS allows remote attackers to execute arbitrary code with high privileges. This vulnerability arises from improper input validation when processing network requests, potentially enabling full system compromise.","exploitability":"Exploitation is likely straightforward for remote attackers with minimal preconditions, requiring only network access to the vulnerable IIS service.","blast_radius":"If exploited, this vulnerability could lead to complete system compromise across all affected Windows servers running vulnerable IIS versions, making it highly impactful for enterprise environments.","remediation":"Apply the latest Windows security updates immediately, specifically the patches released in the August 2026 Update Rollup for Windows Server 2019 and Windows Server 2022.","detection":"Monitor for unusual network traffic patterns to port 80 and 443 on IIS servers, particularly large HTTP request payloads that exceed normal sizes, and check Windows Event Logs for signs of memory corruption or application crashes in the w3wp.exe process.","tags":["rce","web","iis","windows"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:48:14.762Z"}}