EUVD-2026-73122
GHSA-668v-7q7w-4gf7
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
MSMQ listens on network with no auth requirement; impact is purely availability (crash); no confidentiality or integrity effect confirmed.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
5DescriptionCVE.org
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
AnalysisAI
Denial of service via out-of-bounds read in the Windows Message Queuing (MSMQ) Queue Manager allows an unauthenticated remote attacker to crash the service over a network. The vulnerability spans an exceptionally wide range of Windows releases, from end-of-life Server 2012 through current Windows 11 25H2 and Server 2025, making patching scope broad for any enterprise running MSMQ. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The MSMQ (Message Queuing) Windows service must be installed and running - it is an optional component not enabled by default on modern Windows installations, so this vulnerability only affects systems where an administrator has explicitly installed and started MSMQ. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) accurately reflects a straightforward unauthenticated network-reachable DoS with no complexity barriers. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update corresponding to your Windows version to reach the patched build number listed above (e.g., Windows Server 2019 to 10.0.17763.9245 or later, Windows 11 23H2 to 10.0.22631.7582 or later). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all systems running MSMQ Queue Manager across Windows Server 2012, 2016, 2019, 2022, Server 2025, and Windows 11 clients; identify those exposed to untrusted networks and prioritize production systems hosting message-dependent applications. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-125 – Out-of-bounds Read
View allShare
External POC / Exploit Code
Leaving vuln.today