{"id":"CVE-2026-83770","published":"2026-10-13T19:20:25.433","lastModified":"2026-10-16T16:21:29.897","description":"Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83770","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Text Shaping component allows remote attackers to execute arbitrary code with high privileges. This vulnerability arises from improper bounds checking when processing text shaping operations, potentially enabling attackers to gain full system control.","exploitability":"Exploitation is moderately difficult requiring a remote network connection with specific text shaping input, but can be achieved without user interaction once the vulnerable service is accessible.","blast_radius":"The vulnerability could affect any Windows system running applications that utilize text shaping functionality, potentially impacting enterprise networks, web servers, and client systems processing rich text content.","remediation":"Apply the Microsoft Windows Update KB5042851 or later patch immediately to all affected Windows systems.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","text-processing","heap-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:49:25.849Z"}}