PT-2025-10849 · Microsoft · Windows Core Messaging +1

Published

2025-03-11

·

Updated

2025-07-03

·

CVE-2025-26634

CVSS v3.1
7.5
VectorAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions:

Windows Core Messaging (affected versions not specified)

Description:

A heap-based buffer overflow issue in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Heap Based Buffer Overflow

Weakness Enumeration

Related Identifiers

BDU:2025-02624
CVE-2025-26634

Affected Products

Windows
Windows Core Messaging