Microsoft Windows Message Queuing Heap-Based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow vulnerability has been identified in Windows Message Queuing (MSMQ). This vulnerability allows an unauthorized attacker to execute code on a system over an adjacent network. The issue arises when MSMQ processes a specially crafted message, leading to memory corruption that can be exploited to run arbitrary code.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected system.

Remediation

Users can apply the security update for this vulnerability, which is included in the May 2026 security updates. Instructions for downloading the security update can be found in the Microsoft Update Catalog.