{"id":"CVE-2026-83725","published":"2026-10-13T19:20:17.807","lastModified":"2026-10-16T16:21:24.343","description":"Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122","CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83725","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft Windows Search Component allows remote attackers to execute arbitrary code when processing search queries. This vulnerability is particularly concerning because it can be exploited over the network without requiring user interaction, making it a high-severity threat for Windows environments.","exploitability":"Exploitation appears moderately difficult as it likely requires crafting specific search queries that trigger the buffer overflow, but the vulnerability is remotely exploitable with no user interaction required once the attacker has access to the search service.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on affected Windows systems with high privileges, potentially leading to full system compromise and lateral movement across the network.","remediation":"Apply the latest Windows updates that include the fix for CVE-2026-83725, specifically the Windows Search Component patch released in the October 2026 security update.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","search","remote"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:58:30.117Z"}}