EUVD-2026-73496
GHSA-g585-c42c-qwvp
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Network-accessible server-side JScript processing with no auth or user interaction; AC:H reflects heap-grooming complexity required for reliable numeric type confusion exploitation.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.
AnalysisAI
Remote code execution in Microsoft JScript's numeric type conversion logic allows unauthenticated network attackers to execute arbitrary code on affected Windows hosts. The vulnerability stems from CWE-681 (incorrect conversion between numeric types) in jscript.dll, the legacy Windows scripting engine, and affects the full span of supported Windows releases from Windows Server 2012 through Windows 11 26H1 and Windows Server 2025. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network-reachable exposure of a JScript processing surface on the target Windows host. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) characterizes this as a high-severity, network-reachable, unauthenticated RCE with no user interaction required, tempered only by high attack complexity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch is available from Microsoft. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all Windows servers running IIS with Classic ASP enabled and prioritize these systems for patching. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-681 – Incorrect Conversion between Numeric Types
View allShare
External POC / Exploit Code
Leaving vuln.today