Skip to content
Sign in
CVE-2026-1094598.1High

CVE-2026-109459: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Microsoft · Windows 10 Version 1607

Vendor fix available · Affected: Microsoft Windows 10 Version 1607 · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)

  1. In CISA KEV: not seen
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public: not seen
  5. Not establishedNothing in the sources we check

No EPSS score yet. The score appears once FIRST publishes it.

8.1HighCVSS
LowHigh

DescriptionNVD

Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

Coverage1 article · 1 outlet

First in our coverage: SANS ISC, 10 Nov.

  1. Microsoft November 2027 update fixes 1,260 vulnerabilities
    SANS ISC · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.

References

Updated AboutDevelopersSign in