CVE-2010-0806: Microsoft Windows buffer overflow in Server service

CVE-2010-0806 · Severity: critical · CVSS 10 · Exploited in the wild · Published 2026-05-20

CISA has added seven vulnerabilities to its Known Exploited Vulnerabilities catalog, including legacy flaws in Windows and Internet Explorer as well as modern issues in Microsoft Defender. These vulnerabilities are being actively used by attackers to gain unauthorized access, escalate privileges, or disrupt services. Organizations should prioritize patching these specific flaws to prevent potential data breaches or system outages.

Quick answers

Is CVE-2010-0806 exploited in the wild?
Yes. CVE-2010-0806 is known to be exploited in the wild, first recorded on 20 May 2026. Treat it as urgent.
How severe is CVE-2010-0806?
Critical severity, with a CVSS score of 10, published 20 May 2026.
Which products and versions are affected?
Microsoft Windows; Microsoft DirectX; Adobe Acrobat; Adobe Reader; and 2 more.
Is there a fix for CVE-2010-0806?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2010-0806 attacked?
It is attacked over the network, in an operating system.
Am I affected by CVE-2010-0806?
Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This advisory covers seven distinct vulnerabilities added to the CISA KEV catalog due to active exploitation. The flaws include a remote code execution buffer overflow in the Windows Server service (CVE-2008-4250), memory corruption issues in DirectX and Internet Explorer (CVE-2009-1537, CVE-2010-0249, CVE-2010-0806), and a heap overflow in Adobe Acrobat/Reader (CVE-2009-3459). Additionally, two modern vulnerabilities in Microsoft Defender allow for elevation of privilege (CVE-2026-41091) and denial of service (CVE-2026-45498). Attack vectors range from network-based remote exploitation to local privilege escalation. Remediation should follow vendor-specific security updates.

Affected products

  • Microsoft Windows
  • Microsoft DirectX
  • Adobe Acrobat
  • Adobe Reader
  • Microsoft Internet Explorer
  • Microsoft Defender

Identifiers

  • CVE-2010-0806
  • CVE-2009-1537
  • CVE-2009-3459
  • CVE-2008-4250
  • CVE-2026-41091
  • CVE-2010-0249
  • CVE-2026-45498

Timeline

  • 2026-05-20: advisory: CISA published the alert and added vulnerabilities to the KEV catalog.
  • 2026-05-20: exploited: CISA confirmed evidence of active exploitation for these vulnerabilities.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.