VulnSocial

CVE-2026-54992Patch(microsoft / windows_10_1607)

MEDIUMCVSS 7.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch microsoft windows_10_1607 systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.

microsoft CVEsBack to dashboard
4.5/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-122

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1607
  • windows_10_1809
  • windows_10_21h2
  • windows_10_22h2

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 4 signals
  • Peaked 3d ago at 1 mentions (2026-07-14); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
microsoft
Products
windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016windows_server_2019

2 versions affected across 12 products

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-07-14: 1Mentions · 2026-07-16: 1Mentions · 2026-07-20: 1Mentions · 2026-09-22: 1PoC Mentioned / Linked · 2026-07-16: 1Exploit Tool / Code · 2026-07-16: 1Patch / Workaround · 2026-07-14: 1Patch / Workaround · 2026-07-20: 1Patch / Workaround · 2026-09-22: 1Technical Details · 2026-07-14: 1Technical Details · 2026-07-16: 1Technical Details · 2026-07-20: 1Technical Details · 2026-09-22: 107-1407-1607-2009-22
Signal classification2 categories
Patch
375.0%
Exploit
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-141
Patch1
2026-07-161
Exploit1
2026-07-201
Patch1
2026-09-221
Patch1
Full discourse4 posts
  • dbugs@ptdbugs
    Exploit

    A PoC/exploit has been discovered for vulnerability CVE-2026-54992 PT ID: PT-2026-58238 Vendor: Microsoft Product: Windows 10 Version 1607 Description: Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally. References: • https://dbugs.ptsecurity.com/vulnerability/PT-2026-58238 • https://github.com/DavidCarliez/CVE-2026-54992-PoC #dbugs_vuln

    Post summary

    The post announces a PoC/exploit for CVE-2026-54992, providing GitHub code that demonstrates a heap-based buffer overflow in Windows 10 1607, with no patch or active exploitation reported.

    07037117.7K
    3.4K followersView on X
  • 0patch@0patch
    Patch

    Micropatches released for Microsoft Message Queuing Queue Manager Remote Code Execution (CVE-2026-54992) https://0patch.com/blog/micropatches-released-for-microsoft-message-queuing-queue-manager-remote-code-exe https://t.co/ZrP6pcPiYF

    Post summary

    The announcement describes the release of micropatches for a remote code execution vulnerability in Microsoft Message Queuing Queue Manager (CVE-2026-54992).

    12040580
    8.4K followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-54992 (CVSS 8.4) Heap-based buffer overflow in Windows Message Queuing Queue Manager enables unauthorized local code execution. No user interaction required. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/8930YaCID4

    Post summary

    The tweet alerts to CVE‑2026‑54992, a heap overflow in Windows Message Queuing that permits local code execution, and urges immediate patching of the vulnerability.

    0000033
    88 followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 MSMQ may sound like Windows relicware, but CVE-2026-54992 is a critical RCE. Patch it fast—because “nobody uses that old service” is how attackers get invited in. https://windowsforum.com/threads/cve-2026-54992-july-updates-fix-critical-windows-msmq-rce.438220/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MessageQueuing #WindowsSecurityUpdates #Cve202654992 #MicrosoftMsmq https://t.co/g62jPLePi3

    Post summary

    The tweet warns that CVE‑2026‑54992 is a critical RCE and urges users to apply the available patch.

    0000046
    1.2K followersView on X
CPE platform detail22 entries

22 of 22 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1607--x64
OSmicrosoftwindows_10_1607--x86
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2025---

Explore more

Back to dashboardmicrosoft CVEswindows_10_1607 vulnerabilities