Loading vulnerability…
Local Privilege Escalation in Windows Core Messaging
CVE-2026-69918 is a heap-based buffer overflow in Windows Core Messaging that allows an authorized local attacker with low privileges to elevate privileges to SYSTEM. Exploitation has low attack complexity and requires no user interaction. Microsoft rates the vulnerability Important, with a CVSS v3.1 base score of 8.8, and assesses exploitation as more likely. The specific vulnerable function and affected Windows versions are not identified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation grants SYSTEM privileges, with high impacts on confidentiality, integrity, and availability. The vulnerability can affect resources beyond the vulnerable component's security scope.
Patch, then assume compromise.
Apply the applicable Microsoft security update for affected Windows systems. An official vendor fix is available, but specific update packages, KB numbers, and fixed versions are not identified.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.