CVE-2026-70096

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-13: 210-13
Referenced assets2 URLs
Full discourse2 posts
  • VulniPulse@vulnipulse

    CVE advisory: CVE-2026-70096 - microsoft: Windows Rich Text Edit Control Remote Code Execution Vulnerability. https://vulnipulse.com/advisories/microsoft-cve-2026-70096 #CVE #CyberSecurity #Microsoft #WindowsServer

    1000021
    21 followersView on X
  • The Circuitry@thecircuitry_

    Four critical CVEs patched in Microsoft 365 Apps: • CVE-2026-70096: Rich Text Edit Control overflow • CVE-2026-70242/70291: Outlook overflows • CVE-2026-70300: Word pointer dereference All rated 9.8. https://thecircuitry.to/article/microsoft-patches-four-critical-flaws-in-365-apps-for-enterprise-mv738cvv

    0000031
    40 followersView on X

Explore more