CVE-2026-97814

A heap-based buffer overflow vulnerability exists in Windows Text Shaping , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS score of 9.80 and is characterized by low attack complexity, requiring no privileges or user interac...

CVE-2026-102225

Windows is affected by an out-of-bounds read vulnerability within the Text Shaping component. This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-197 (Numeric Truncation Error). W...

CVE-2026-102210

A Heap-based buffer overflow vulnerability exists in Windows Text Shaping . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CRITICAL CVSS score of 9.8, indicating high impact on confidentiality, integrity, and avail...

CVE-2026-83770

A heap-based buffer overflow exists in Windows Text Shaping that allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is classified as CRITICAL with a CVSS score of 9.8. Systems connected to public networks are at a higher risk, as the vulnerability can be ...

CVE-2026-69786

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

CVE-2026-69353

Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally...

CVE-2026-69786

CVE-2026-69786 is a heap-based buffer overflow in Windows Text Shaping that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS 3.1 score of 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high attack co...

EUVD-2026-73632

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

CVE-2026-69353

CVE-2026-69353 is an out-of-bounds read vulnerability in Windows Text Shaping that allows a locally authenticated attacker with low privileges to disclose information. The attack vector is local, requires no user interaction, and the scope is unchanged. The CVSS v3.1 base score is 5.5 (Medium) , ...

EUVD-2026-73469

Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally...

Windows Text Shaping Information Disclosure Vulnerability

Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally...

Windows Text Shaping Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

CVE-2026-69786: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

PT-2026-87394

Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally...

PT-2026-87719

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

CVE-2026-69353: Out-of-bounds Read

Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally...

CVE-2026-4546

CVE-2026-4546 affects Flos Freeware Notepad2 4.2.25, where a weakness in the TextShaping.dll library leads to an uncontrolled search path. The issue is exploitable only via local access with high attack complexity and low privileges required, potentially impacting confidentiality, integrity, and ...

PT-2026-27008

Name of the Vulnerable Software and Affected Versions Flos Freeware Notepad2 version 4.2.25 Description A weakness exists in Flos Freeware Notepad2 4.2.25, impacting an unknown function within the TextShaping.dll library. Exploitation involves a manipulation that can lead to an uncontrolled searc...

CVE-2026-22693

HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hbmalloc returns NULL before using placement new to construct an object at t...

CVE-2023-53959 FileZilla Client 3.63.1 DLL Hijacking via Missing TextShaping.dll

FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the missing DLL to achieve remote code...