CVE-2026-83770
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute malicious code, potentially leading to system takeover and data integrity compromise.
Recommendation
Install security updates for Windows Text Shaping and restrict access to text services.
Other vulnerabilities in Windows Text Shaping
See all- CVE-2026-97814Critical
Windows Text Shaping is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-102210Critical
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-102225High
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-69786High
A heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- CVE-2026-69353Medium
An out-of-bounds read vulnerability in Windows Text Shaping allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS