CVE Catalog
CVE-2026-70096
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.96%
61th percentile - higher than 61% of all known CVEs
Summary
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code on the system, potentially leading to full system compromise or lateral movement.
Recommendation
Apply the latest security updates from Microsoft for the Rich Text Edit Control.
Other vulnerabilities in Windows Rich Text Edit Control
Original NVD description (English source)
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS