1136 matches found
CVE-2026-54992-PoC
CVE-2026-54992 PoC Proof of concept for the Microsoft Message Queuing remote-read integer overflow tracked as CVE-2026-54992. The PoC uses two Windows VMs. A normal user on the vulnerable target asks the local MSMQ service to read from a queue hosted by the helper. The helper returns a malformed...
MSMQ-Vulnerability
MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...
CVE-2023-21554
MSMQ Vulnerability Proof of Concept This repository contains a ready-to-run proof of concept that targets Microsoft Message Queuing listening on TCP port 1801. This work is based on and uses materials from the original project at https://github.com/leongxudong/MSMQ-Vulnerability This repository...
Vulnerabilities in Microsoft Windows
Microsoft has identified 666 vulnerabilities in Windows. Malicious actors can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. Microsoft has identified 666 vulnerabilities in Windows. The 32 most severe vulnerabilities are...
CVE-2026-83997
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-72932
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...
CVE-2026-69645
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally...
CVE-2026-69579
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-68887
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network...
EUVD-2026-73916
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-83997
CVE-2026-83997 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to achieve remote code execution over the network. The CNA-assigned CVSS 3.1 score is 8.1 (HIGH) , with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack vecto...
EUVD-2026-73666
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...
CVE-2026-72932
CVE-2026-72932 is a buffer over-read in the Windows Message Queuing Queue Manager that allows an unauthorized, unauthenticated attacker to disclose information over a network . The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, low complexity, and high confidentiality impact but no ...
EUVD-2026-73261
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-69579
CVE-2026-69579 is a use-after-free vulnerability in Windows Message Queuing that allows an unauthorized attacker to execute code over a network . The CVSS 3.1 score is 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network-exploitable, low-complexity remote code e...
EUVD-2026-73122
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network...
CVE-2026-68887
CVE-2026-68887 is an out-of-bounds read in Windows Message Queuing Queue Manager that allows an unauthorized, network-based attacker to trigger a denial of service . The vulnerability requires no prior authentication or user interaction and carries a CVSS 3.1 base score of 7.5 (HIGH) , with impac...
CVE-2026-69645
CVE-2026-69645 is a use-after-free vulnerability in Windows Message Queuing that allows an authorized local attacker to escalate privileges. The flaw resides in the Windows Message Queuing component and results in high impact across confidentiality, integrity, and availability (CVSS 3.1 base scor...