{"id":"CVE-2026-112967","kind":"vulnerability","aliases":["CVE-2026-112967"],"related":[],"title":"Windows Xbox Live Networking Service: heap overflow lets an attacker run code","description":"Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.","summary":"A heap-based buffer overflow in the Windows Xbox Live Networking Service lets an unauthorized attacker send crafted network traffic that overwrites memory. The sources say this allows code execution over the network.","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Windows Xbox Live Networking Service","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["other","windows","xbox-live"],"not_affected_if":[],"how_to_check":"unknown: the MSRC advisory for CVE-2026-112967 was not readable. Check https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-112967 for the affected Windows builds and KB, then compare with the installed build (winver).","fix":null,"status":"open","published_at":"2026-11-10T19:18:46+00:00","first_seen_at":"2026-11-10T19:24:34+00:00","triaged_at":"2026-11-10T19:25:44+00:00","updated_at":"2026-11-10T19:35:26+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-10T19:25:44Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Xbox Live Networking Service: heap overflow lets an attacker run code","impact":"high","summary":"A heap-based buffer overflow in the Windows Xbox Live Networking Service lets an unauthorized attacker send crafted network traffic that overwrites memory. The sources say this allows code execution over the network.","audience":"everyone","category":"other","nicknames":[],"who_cares":["windows","xbox-live"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker runs code on the affected Windows machine over the network.","analyst_note":"Confirm which Windows versions ship the Xbox Live Networking Service, the fixed update, and whether the service is on by default, using the Microsoft Security Response Center advisory for CVE-2026-112967.","how_to_check":"unknown","plain_action":"Install the Windows update from Microsoft that covers the Xbox Live Networking Service once it is released; the sources do not name a specific update.","product_name":"Windows Xbox Live Networking Service","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000681,"input_tokens":4503,"output_tokens":462,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Confirm which Windows versions ship the Xbox Live Networking Service, the fixed update, and whether the service is on by default, using the Microsoft Security Response Center advisory for CVE-2026-112967.","search":"'-112967':15A,18A '-2026':14A,17A 'allow':57B,74C 'attack':10A,45B,77C 'base':32B,65C 'buffer':33B,66C 'code':12A,58B,80C 'craft':47B 'cve':13A,16A 'execut':59B,79C 'heap':6A,31B,64C 'heap-bas':30B,63C 'let':8A,42B 'live':3A,21A,28B,39B,71C 'memori':52B 'network':4A,40B,48B,62B,72C,83C 'networking':22A 'overflow':7A,34B,67C 'overwrit':51B 'run':11A 'say':55B 'send':46B 'servic':5A,41B,73C 'service':23A 'sourc':54B 'traffic':49B 'unauthor':44B,76C 'window':1A,25B,37B,69C 'windows':19A 'xbox':2A,20A,27B,38B,70C 'xbox-liv':26B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"everyone","plain_action":"Install the Windows update from Microsoft that covers the Xbox Live Networking Service once it is released; the sources do not name a specific update.","pkeys":["windowsxboxlivenetworkingservice","xboxlivenetworkingservice"],"ptokens":["live","networking","service","windows","xbox"],"labels":["critical","other","vendor","windows","xboxlive"],"campaign_type":null,"search_a":"'-112967':15A,18A '-2026':14A,17A 'attack':10A 'code':12A 'cve':13A,16A 'heap':6A 'let':8A 'live':3A,21A 'network':4A 'networking':22A 'overflow':7A 'run':11A 'servic':5A 'service':23A 'window':1A 'windows':19A 'xbox':2A,20A","search_b":"'allow':57B 'attack':45B 'base':32B 'buffer':33B 'code':58B 'craft':47B 'execut':59B 'heap':31B 'heap-bas':30B 'let':42B 'live':28B,39B 'memori':52B 'network':40B,48B,62B 'overflow':34B 'overwrit':51B 'say':55B 'send':46B 'servic':41B 'sourc':54B 'traffic':49B 'unauthor':44B 'window':25B,37B 'xbox':27B,38B 'xbox-liv':26B","search_c":"'allow':74C 'attack':77C 'base':65C 'buffer':66C 'code':80C 'execut':79C 'heap':64C 'heap-bas':63C 'live':71C 'network':72C,83C 'overflow':67C 'servic':73C 'unauthor':76C 'window':69C 'xbox':70C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:46+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112967","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112967","severity":null,"published_at":"2026-11-10T19:18:46+00:00","modified_at":"2026-11-10T19:18:47+00:00","first_seen_at":"2026-11-10T19:24:34+00:00","fetched_at":"2026-11-10T19:24:34+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-112967:2527","url":null,"severity":null,"published_at":"2026-11-10T19:35:25+00:00","modified_at":"2026-11-10T19:35:26+00:00","first_seen_at":"2026-11-10T19:35:25+00:00","fetched_at":"2026-11-10T19:35:26+00:00","note":"gotcha: MSRC update-guide is JS-only; WebFetch gets only a title and the browser-cli session died on text; CVRF monthly API exceeds 10MB."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}