EUVD-2026-73630
GHSA-rf96-8rh2-x4vq
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Pre-auth network-reachable heap overflow in a service yielding code execution warrants AV:N/AC:L/PR:N/UI:N with full C:H/I:H/A:H; scope unchanged.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
AnalysisAI
Remote code execution in the Windows HTTP Print Provider allows an unauthenticated network attacker to execute arbitrary code by exploiting a heap-based buffer overflow (CWE-122). The flaw affects a broad range of Windows client and server releases from Server 2012 through Windows 11 25H2 and Server 2025, and per the CVSS:3.1 AV:N/AC:L/PR:N/UI:N vector requires no authentication or user interaction. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to a Windows host on which the HTTP Print Provider / Internet Printing (IPP-over-HTTP) endpoint is running and listening - this is the concrete prerequisite implied by the component name and the AV:N vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are consistent and point to genuine priority: CVSS:3.1 rates this 9.8 with AV:N/AC:L/PR:N/UI:N and C:H/I:H/A:H, meaning remote, unauthenticated, low-complexity exploitation with full impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update for CVE-2026-69769 for your specific Windows build; Patch available per vendor advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69769). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Immediately conduct an inventory of all Windows Server 2012-2025 and Windows 11 systems (including 25H2) connected to your network, identifying and prioritizing critical infrastructure such as domain controllers, file servers, messaging systems, and SQL servers for emergency patching within 24 hours. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today