{"id":"CVE-2026-96067","published":"2026-11-10T19:22:04.777","lastModified":"2026-11-11T05:19:56.193","description":"Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96067","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An integer overflow vulnerability in Microsoft Color Management (CWE-190) allows an unauthenticated remote attacker to trigger memory corruption over the network, potentially leading to arbitrary code execution. The flaw is exploitable without user interaction or prior access.","exploitability":"Exploitation requires network access to a vulnerable system with Microsoft Color Management functionality exposed; no authentication or user interaction is needed, but successful exploitation likely depends on precise memory conditions that may require multiple attempts or additional information about the target environment.","blast_radius":"If exploited, this vulnerability could allow full system compromise—including confidentiality, integrity, and availability impacts—on any affected system without lateral movement, making it highly dangerous for exposed services.","remediation":"No fixed version or patch level is specified in the published description; Microsoft has not released a fix as of the CVE record date. As an immediate control, disable or restrict access to the affected Color Management network-exposed interfaces per vendor guidance, and monitor for unauthorized use of color management APIs.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["integer-overflow","rce","network-exploitable","no-auth","windows","color-management"],"model":"garnet-coder","analyzedAt":"2026-11-11T09:52:09.314Z"}}