EUVD-2026-73053
GHSA-9jx2-pm5q-rx3m
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Network-reachable RPC Runtime with unauthenticated, no-interaction OOB-write RCE yields full C/I/A impact; scope unchanged as code runs within the service context.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
AnalysisAI
Remote code execution in the Microsoft Windows RPC Runtime (rpcrt4) allows an unauthorized network attacker to trigger an out-of-bounds write and execute arbitrary code, per CVSS with no authentication or user interaction. All supported Windows client and server releases from Server 2012 through Windows 11 25H2/26H1 and Server 2025 are affected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions per CVSS - remote unauthenticated exploitation over the network against the RPC Runtime with no user interaction (AV:N/AC:L/PR:N/UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine high-priority issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update for CVE-2026-69819 for your specific Windows build; Patch available per vendor advisory, with fixed builds enumerated per release (e.g., Server 2019 10.0.17763.9245, Server 2022 10.0.20348.5622, Windows 10 22H2 10.0.19045.7725, Windows 11 24H2 10.0.26100.9445, Server 2025 10.0.26100.33438) - see https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69819. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows systems by operating system version and create a prioritized patch deployment plan focused on production servers (Server 2019, 2022, 2025) and critical infrastructure; begin immediate patch deployment to these server versions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today