CVE-2026-69819: RPC Runtime Library Remote Code Execution Vulnerability
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
Other sources
RPC Runtime Library Remote Code Execution Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerability is remotely exploitable over a network and requires no privileges or user interaction. An unauthorized attacker can exploit the out-of-bounds write to execute code.
Which systems should be prioritized for investigation?
Systems running the listed Microsoft Windows client or server products should be prioritized, especially network-reachable hosts. The affected product list includes Windows 10, Windows 11, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.
What is the potential impact of successful exploitation?
Successful exploitation can result in remote code execution. The supplied severity vector indicates high potential impact to confidentiality, integrity, and availability.