{"id":"CVE-2026-97815","published":"2026-10-13T19:22:19.930","lastModified":"2026-10-16T17:18:05.910","description":"Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["windows 10 1607","windows 10 1809","windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2012","windows server 2016","windows server 2019"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97815","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows Error Reporting allows remote attackers to execute arbitrary code on affected systems. This vulnerability is particularly dangerous because it can be exploited over the network without any user interaction or authentication.","exploitability":"Exploitation is relatively straightforward with no special preconditions required, as the vulnerability exists in a network-accessible component that handles error reporting data.","blast_radius":"The impact could be severe across Windows systems that have Windows Error Reporting enabled, potentially allowing attackers to gain full system compromise on any vulnerable machine.","remediation":"Deploy the Windows Update KB5049762 or later for Windows 10 and Windows 11 systems, or apply the Microsoft Security Response Center's patch for Windows Server 2016, 2019, and 2022.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","windows","network","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:52:24.466Z"}}