CVE-2026-83693

9.8Critical

Published 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash

9.8Critical

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-122

Impact

Unauthenticated attackers can execute arbitrary code remotely over the network. They need network access to reach vulnerable Windows Error Reporting services.

Root cause

A heap-based buffer overflow in Windows Error Reporting allows remote memory corruption.

Affected systems

Versions not listed — check the vendor advisory.

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Install the official Windows security update from MSRC for this advisory once released. As an interim workaround, restrict network access to affected hosts or disable the Windows Error Reporting service (WerSvc) if patching cannot be done immediately.

shell

$ Stop-Service -Name WerSvc -Force; Set-Service -Name WerSvc -StartupType Disabled

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83693

Source: nvd.nist.gov/vuln/detail/CVE-2026-83693