CVE-2026-112967

CriticalCVSS 9.8/10Last modified Nov 11, 2026

Description

Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.9487
MicrosoftWindows 10 Version 21H2>= 10.0.19044.0, < 10.0.19044.7846
MicrosoftWindows 10 Version 22H2>= 10.0.19045.0, < 10.0.19045.7846
MicrosoftWindows 11 version 23H2>= 10.0.22631.0, < 10.0.22631.7711
MicrosoftWindows 11 Version 23H2>= 10.0.22631.0, < 10.0.22631.7711
MicrosoftWindows 11 Version 24H2>= 10.0.26100.0, < 10.0.26100.9974
MicrosoftWindows 11 Version 25H2>= 10.0.26200.0, < 10.0.26200.9974
MicrosoftWindows 11 version 26H1>= 10.0.28000.0, < 10.0.28000.3501
MicrosoftWindows 11 Version 26H2>= 10.0.26300.0, < 10.0.26300.9974

References

Timeline

Published
Nov 10, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1129687.0Use after free in Windows COM allows an authorized attacker to elevate privileges locally.CVE-2026-1129696.6Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges with a physical attack.CVE-2026-112977.7Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypCVE-2026-1129707.0Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally.CVE-2026-1129717.0Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.CVE-2026-1129727.5Integer overflow or wraparound in Windows SMB Server allows an authorized attacker to execute code over a network.CVE-2026-1129737.1Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.CVE-2026-1129745.5Improper access control in Microsoft Account allows an authorized attacker to perform tampering locally.CVE-2026-1129755.3Untrusted pointer dereference in Windows Link-Layer Discovery Protocol (LLDP) allows an unauthorized attacker to deny service over an adjaceCVE-2026-1129767.0Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.CVE-2026-1129775.5Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally.CVE-2026-1129787.8Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-112967: Critical severity, CVSS 9.8 | Vulnix