cbcvebase.
CVE-2025-26634
published 2025-03-11

CVE-2025-26634: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.

high7.5CVSS 3.1
AVNACHPRLUINSUCHIHAH
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.

Affected

38 ranges· showing 25
VendorProductVersion rangeFixed in
microsoftwindows_10_1507< 10.0.10240.2091510.0.10240.20915
microsoftwindows_10_1607< 10.0.14393.778510.0.14393.7785
microsoftwindows_10_21h2< 10.0.19044.548710.0.19044.5487
microsoftwindows_10_22h2< 10.0.19045.548710.0.19045.5487
microsoftwindows_10_version_1507>= 10.0.10240.0 < 10.0.10240.2091510.0.10240.20915
microsoftwindows_10_version_1607>= 10.0.14393.0 < 10.0.14393.778510.0.14393.7785
microsoftwindows_10_version_1809>= 10.0.17763.0 < 10.0.17763.689310.0.17763.6893
microsoftwindows_10_version_21h2>= 10.0.19044.0 < 10.0.19044.548710.0.19044.5487
microsoftwindows_10_version_22h2>= 10.0.19045.0 < 10.0.19045.548710.0.19045.5487
microsoftwindows_11_22h2< 10.0.22621.489010.0.22621.4890
microsoftwindows_11_23h2< 10.0.22631.489010.0.22631.4890
microsoftwindows_11_24h2< 10.0.26100.319410.0.26100.3194
microsoftwindows_11_version_22h2>= 10.0.22621.0 < 10.0.22621.489010.0.22621.4890
microsoftwindows_11_version_22h3>= 10.0.22631.0 < 10.0.22631.489010.0.22631.4890
microsoftwindows_11_version_23h2>= 10.0.22631.0 < 10.0.22631.489010.0.22631.4890
microsoftwindows_11_version_24h2>= 10.0.26100.0 < 10.0.26100.319410.0.26100.3194
microsoftwindows_server_2016< 10.0.14393.778510.0.14393.7785
microsoftwindows_server_2016>= 10.0.14393.0 < 10.0.14393.778510.0.14393.7785
microsoftwindows_server_2019< 10.0.17763.689310.0.17763.6893
microsoftwindows_server_2019>= 10.0.17763.0 < 10.0.17763.689310.0.17763.6893
microsoftwindows_server_2022< 10.0.20348.320710.0.20348.3207
microsoftwindows_server_2022>= 10.0.20348.0 < 10.0.20348.320710.0.20348.3207
microsoftwindows_server_2022_23h2< 10.0.25398.142510.0.25398.1425
microsoftwindows_server_2025< 10.0.26100.319410.0.26100.3194
microsoftwindows_server_2025>= 10.0.26100.0 < 10.0.26100.319410.0.26100.3194