NetSight
high8.8

CVE-2026-83778

Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.

Impact

Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 Version 21H2
from 10.0.19044.0 before 10.0.19044.7807
MicrosoftWindows Server 2012 R2 (Server Core Installation)
from 6.3.9600.0 before 6.3.9600.23470
MicrosoftWindows Server 2016
from 10.0.14393.0 before 10.0.14393.9612
MicrosoftWindows 11 Version 23H2
from 10.0.22631.0 before 10.0.22631.7652
MicrosoftWindows Server 2012 (Server Core Installation)
from 6.2.9200.0 before 6.2.9200.26434
MicrosoftWindows 10 Version 22H2
from 10.0.19045.0 before 10.0.19045.7807
MicrosoftWindows Server 2016 (Server Core Installation)
from 10.0.14393.0 before 10.0.14393.9612
MicrosoftWindows Server 2025
from 10.0.26100.0 before 10.0.26100.33650
MicrosoftWindows 11 Version 26H1
from 10.0.28000.0 before 10.0.28000.3231
MicrosoftWindows 11 Version 25H2
from 10.0.26200.0 before 10.0.26200.9711
MicrosoftWindows Server 2022
from 10.0.20348.0 before 10.0.20348.5761
MicrosoftWindows Server 2012
from 6.2.9200.0 before 6.2.9200.26434

Weakness classification

References