---
id: "CVE-2026-96081"
page: "https://infrastack.ai/live/CVE-2026-96081"
kind: "vulnerability"
aliases: ["CVE-2026-96081"]
title: "Windows Rich Text Edit Control: heap overflow lets an attacker run code over network"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "rce", "rich-text-edit", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:22:06+00:00"
first_seen_at: "2026-11-10T19:25:30+00:00"
updated_at: "2026-11-10T19:54:05+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96081", "first_seen_at": "2026-11-10T19:25:30+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-10T19:54:05+00:00"}]
exploit_sources: []
---

# Windows Rich Text Edit Control: heap overflow lets an attacker run code over network

Link for people: https://infrastack.ai/live/CVE-2026-96081 (this .md is for agents)

A heap-based buffer overflow in the Windows Rich Text Edit Control lets an unauthorized attacker run code across a network. NVD rates it high, CVSS 7.5.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96081
- 2026-11-10T19:54:05+00:00 analyst — Could not read the primary source. The MSRC update guide is JS-only and web-cli returned empty. The browser tool is out of quota. The MSRC CVRF index only shows the 2026-Nov release (2026-11-10). So the fix is in the November 2026 Windows security updates, but affected builds, KB numbers and whether user interaction is needed are unknown. Nothing verified. Found no reports of exploitation or a public PoC. To settle it, read the MSRC entry for CVE-2026-96081 or the 2026-Nov CVRF document. Sibling CVE-2026-70096 (same component, October, 9.8) is a different record.

## From the sources

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_