{"id":"CVE-2026-116710","kind":"vulnerability","aliases":["CVE-2026-116710"],"related":[],"title":"Windows Message Queuing: heap overflow lets a network attacker run code","description":"Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.","summary":"A heap-based buffer overflow in Windows Message Queuing lets an unauthorized attacker send crafted network traffic that can execute code. The sources give a CVSS score of 8.1 and do not name the affected Windows versions or a fix.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","msmq","network","windows"],"not_affected_if":[],"how_to_check":"Unknown until Microsoft's advisory is read. Likely check: whether the Message Queuing (MSMQ) Windows feature is installed and the service 'Message Queuing' is running (Get-Service MSMQ; TCP port 1801 listening). Machines without MSMQ are probably not exposed, but this is not confirmed by a source.","fix":null,"status":"open","published_at":"2026-11-10T19:19:13+00:00","first_seen_at":"2026-11-10T19:24:45+00:00","triaged_at":"2026-11-10T19:35:58+00:00","updated_at":"2026-11-10T23:39:15+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:35:58Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Message Queuing: heap overflow lets a network attacker run code","impact":"high","summary":"A heap-based buffer overflow in Windows Message Queuing lets an unauthorized attacker send crafted network traffic that can execute code. The sources give a CVSS score of 8.1 and do not name the affected Windows versions or a fix.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","msmq"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker runs code on the Windows server over the network","analyst_note":"Check the Microsoft security update guide for CVE-2026-116710 for affected Windows builds, whether MSMQ must be enabled, and the fixed update.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Windows machines with the Message Queuing (MSMQ) feature enabled and reachable over the network are the likely exposure, but the sources do not confirm the affected versions or configuration. unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000665,"input_tokens":4494,"output_tokens":431,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the Microsoft security update guide for CVE-2026-116710 for affected Windows builds, whether MSMQ must be enabled, and the fixed update.","search":"'-116710':14A,17A '-2026':13A,16A '8.1':51B 'affect':57B 'allow':72C 'attack':9A,35B,75C 'base':25B,65C 'buffer':26B,66C 'code':11A,43B,78C 'craft':37B 'cve':12A,15A 'cvss':48B 'execut':42B,77C 'fix':62B 'give':46B 'heap':4A,24B,64C 'heap-bas':23B,63C 'infrastructur':18B 'let':6A,32B 'messag':2A,30B,70C 'msmq':19B 'name':55B 'network':8A,20B,38B,81C 'overflow':5A,27B,67C 'queu':3A,31B,71C 'run':10A 'score':49B 'send':36B 'sourc':45B 'traffic':39B 'unauthor':34B,74C 'version':59B 'window':1A,21B,29B,58B,69C","nicknames":[],"mitigations":[],"who_affected":"Windows machines running the Message Queuing (MSMQ) feature and reachable over the network are the likely exposure; the NVD entry rates it CVSS 8.1 (network, high complexity, no privileges, no user interaction). Affected Windows builds and the fixing update are not confirmed yet. Systems without MSMQ installed can probably skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","msmq","network","windows"],"campaign_type":null,"search_a":"'-116710':14A,17A '-2026':13A,16A 'attack':9A 'code':11A 'cve':12A,15A 'heap':4A 'let':6A 'messag':2A 'network':8A 'overflow':5A 'queu':3A 'run':10A 'window':1A","search_b":"'8.1':51B 'affect':57B 'attack':35B 'base':25B 'buffer':26B 'code':43B 'craft':37B 'cvss':48B 'execut':42B 'fix':62B 'give':46B 'heap':24B 'heap-bas':23B 'infrastructur':18B 'let':32B 'messag':30B 'msmq':19B 'name':55B 'network':20B,38B 'overflow':27B 'queu':31B 'score':49B 'send':36B 'sourc':45B 'traffic':39B 'unauthor':34B 'version':59B 'window':21B,29B,58B","search_c":"'allow':72C 'attack':75C 'base':65C 'buffer':66C 'code':78C 'execut':77C 'heap':64C 'heap-bas':63C 'messag':70C 'network':81C 'overflow':67C 'queu':71C 'unauthor':74C 'window':69C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:13+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116710","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116710","severity":null,"published_at":"2026-11-10T19:19:13+00:00","modified_at":"2026-11-10T19:19:13+00:00","first_seen_at":"2026-11-10T19:24:45+00:00","fetched_at":"2026-11-10T19:24:45+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-116710:3210","url":null,"severity":null,"published_at":"2026-11-10T23:39:15+00:00","modified_at":"2026-11-10T23:39:15+00:00","first_seen_at":"2026-11-10T23:39:15+00:00","fetched_at":"2026-11-10T23:39:15+00:00","note":"MSRC page unreachable (JS-only; browser and web-cli unavailable; CVRF feed too large). NVD page gave no detail. Nothing verified; versions, KB and fix unknown. Settle by reading the MSRC update guide entry."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}