CVE-2026-83910
9.8CriticalPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-787
Impact
Unauthenticated attackers can execute arbitrary code over the network with full system privileges. They only need network connectivity to the listening RPC service without any credentials or user interaction.
Root cause
An out-of-bounds memory write flaw exists inside the RPC Runtime component.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Install the official Microsoft security update referencing CVE-2026-83910 immediately; if patching must wait, block inbound traffic to RPC ports (such as TCP port 135 and dynamic RPC ranges) at the network perimeter.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.