1378 matches found
CVE-2023-21554-PoC
CVE-2023-21554 — QueueJumper PoC Proof of concept for CVE-2023-21554 , also known as QueueJumper , affecting Microsoft Message Queuing MSMQ. The PoC implements the MSMQ/SRMP protocol interaction associated with the vulnerability and can be used to investigate the behavior of an MSMQ service over...
CVE-2026-54992-PoC
CVE-2026-54992 PoC Proof of concept for the Microsoft Message Queuing remote-read integer overflow tracked as CVE-2026-54992. The PoC uses two Windows VMs. A normal user on the vulnerable target asks the local MSMQ service to read from a queue hosted by the helper. The helper returns a malformed...
MSMQ-Vulnerability
MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...
CVE-2023-21554
MSMQ Vulnerability Proof of Concept This repository contains a ready-to-run proof of concept that targets Microsoft Message Queuing listening on TCP port 1801. This work is based on and uses materials from the original project at https://github.com/leongxudong/MSMQ-Vulnerability This repository...
Vulnerabilities in Microsoft Windows
Microsoft has identified 666 vulnerabilities in Windows. Malicious actors can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. Microsoft has identified 666 vulnerabilities in Windows. The 32 most severe vulnerabilities are...
CVE-2026-119848
Improper input validation in Windows Message Queuing allows an authorized attacker to deny service over a network...
CVE-2026-119833
Untrusted pointer dereference in Windows Message Queuing allows an authorized attacker to elevate privileges locally...
CVE-2026-118126
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally...
CVE-2026-118125
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally...
CVE-2026-116710
Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-109459
Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...
CVE-2026-105515
Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network...
EUVD-2026-122459
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...
CVE-2026-119967
A use-after-free vulnerability exists in the Windows Message Queuing Queue Manager , which may allow an unauthorized attacker to execute code over a network . This flaw was addressed in the November 2026 security updates. While specific exploit details or in-the-wild exploitation instances are no...
EUVD-2026-122456
Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-119964
A double free vulnerability exists in Windows Message Queuing , which could allow an unauthorized attacker to execute code over a network. The vulnerability is associated with CWE-415 and has a High severity rating (CVSS 3.1 score of 8.1). While the provided documents confirm the existence of the...
CVE-2026-119963
A double free vulnerability exists in Windows Message Queuing , which could allow an unauthorized attacker to execute code over a network. The impact of this vulnerability includes high levels of confidentiality, integrity, and availability impact. Remediation is available through official securi...
EUVD-2026-122455
Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-119848
A vulnerability exists in Windows Message Queuing due to improper input validation. This flaw allows an authorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is associated with CWE-476 (NULL Pointer Dereference) and has a CVSS 3.1 base score of 5.3 (Med...