{"id":"CVE-2026-83874","published":"2026-10-13T19:20:37.530","lastModified":"2026-10-16T16:21:40.983","description":"Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83874","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Event Tracing allows remote attackers to execute arbitrary code when processing specially crafted event data. This vulnerability is particularly concerning because it can be exploited over the network without requiring authentication.","exploitability":"Exploitation appears moderately difficult as it likely requires crafting specific event data that triggers the buffer overflow, but the lack of public exploit references suggests it may require significant technical expertise to achieve reliable remote code execution.","blast_radius":"If successfully exploited, this vulnerability could allow attackers to execute arbitrary code on affected Windows systems with the privileges of the Event Tracing service, potentially leading to full system compromise across enterprise networks.","remediation":"Apply the latest Windows updates that include the fix for CVE-2026-83874, specifically the July 2026 security updates or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:59:33.477Z"}}