CVE-2026-85334
7.5HighPublished 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on confidentiality
- Weakness
- CWE-125
Impact
Unauthenticated attackers can read sensitive system memory remotely over the network. They only need network reachability to the Message Queuing service.
Root cause
An out-of-bounds read flaw (CWE-125) exists in the Windows Message Queuing Queue Manager.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Fix & remediation
Install the relevant Microsoft security update from the vendor advisory. If you cannot patch immediately, stop and disable the Message Queuing service (MSMQ) or block TCP port 1801 at the firewall.
$ Stop-Service -Name MSMQ -Force; Set-Service -Name MSMQ -StartupType DisabledAI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.