Executive brief
Windows URL Moniker, a system component that handles web resource references in Windows, contains a heap-based buffer overflow vulnerability that allows an attacker to execute arbitrary code over the network without authentication. This could lead to complete system compromise, including data theft, malware installation, and ransomware deployment.
Technical details
A heap-based buffer overflow exists in Windows URL Moniker that can be triggered over the network without requiring user authentication or interaction. The vulnerability allows remote code execution with the privileges of the affected process, potentially achieving system-level access. A patch is available from Microsoft.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed