{"id":"CVE-2026-96078","published":"2026-11-10T19:22:06.210","lastModified":"2026-11-11T05:19:56.380","description":"Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122","CWE-191"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96078","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow (CWE-122) with integer overflow (CWE-191) exists in Microsoft Color Management, allowing remote code execution without authentication over the network. The vulnerability enables an unauthenticated attacker to corrupt memory and potentially execute arbitrary code on affected systems.","exploitability":"Exploitation is highly likely due to network accessibility, low attack complexity, and no required privileges or user interaction.","blast_radius":"Successful exploitation could lead to full system compromise including data theft, malware deployment, or lateral movement across the network.","remediation":"No fixed version or patch level is specified in the published description; disable Microsoft Color Management functionality or restrict network access to affected services pending vendor guidance.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","heap-overflow","integer-overflow","network-exploitable","no-auth"],"model":"garnet-coder","analyzedAt":"2026-11-11T09:52:18.084Z"}}