{"id":"CVE-2026-83935","published":"2026-10-13T19:20:50.337","lastModified":"2026-10-16T16:21:49.530","description":"Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83935","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft XML allows remote attackers to execute arbitrary code when processing specially crafted XML data. This vulnerability is particularly dangerous because it can be exploited over the network without any user interaction or authentication.","exploitability":"Exploitation is relatively straightforward with a remote attacker able to send malformed XML data, requiring no special preconditions beyond network access to the vulnerable service.","blast_radius":"The impact could be severe across all systems running vulnerable Microsoft XML components, potentially allowing attackers to gain full system compromise and lateral movement throughout the network.","remediation":"Apply the latest Microsoft XML security update immediately, specifically the patch released in the July 2026 Security Updates (KB5061234).","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","xml","network","heap-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:49:59.192Z"}}