{"id":"CVE-2026-88219","published":"2026-10-13T19:21:42.773","lastModified":"2026-10-16T17:17:52.333","description":"Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-822"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88219","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A critical untrusted pointer dereference vulnerability in the RPC Runtime allows remote attackers to execute arbitrary code with high privileges. This flaw occurs when the system processes untrusted data from network RPC calls without proper validation, potentially leading to complete system compromise.","exploitability":"Exploitation is moderately difficult requiring a network-based attack with specific RPC call patterns, but can be achieved by an unauthenticated attacker with minimal preconditions.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full system control across affected networks, potentially affecting multiple systems that rely on the RPC runtime for inter-process communication.","remediation":"Apply the latest security patch from Microsoft or the vendor that addresses CVE-2026-88219, as no specific version is mentioned in the description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","rpc","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:17:50.817Z"}}