Executive brief
A critical vulnerability has been identified in the Windows Message Queuing (MSMQ) service, a component used for reliable communication between applications. An attacker can exploit this flaw over the network without any user interaction or login credentials to gain full control of the affected system. This could lead to complete data theft, service disruption, or the installation of malicious software across the corporate network.
Technical details
This vulnerability is a heap-based buffer overflow (CWE-122) residing in the Windows Message Queuing (MSMQ) service. The flaw is exploitable over the network (TCP port 1801) without authentication or user interaction, as indicated by the CVSS vector AV:N/AC:L/PR:N/UI:N. An attacker sending a specially crafted MSMQ packet can trigger the overflow to achieve remote code execution (RCE) in the context of the service. Microsoft has released security updates to address this issue across multiple versions of Windows and Windows Server.
Affected products
- Microsoft Windows 10 Version 1607 < 10.0.14393.9339
- Microsoft Windows 10 Version 1809 < 10.0.17763.9020
- Microsoft Windows 10 Version 21H2 < 10.0.19044.7548
- Microsoft Windows 10 Version 22H2 < 10.0.19045.7548
- Microsoft Windows 11 Version 24H2 < 10.0.26100.8875
- Microsoft Windows Server 2012 < 6.2.9200.26226
Timeline
- 2026-07-14: advisory
- 2026-07-14: disclosed