Heap-based buffer overflow in Microsoft Windows and Windows Server - CVE-2026-83754

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to a heap-based buffer overflow in OpenSSH for Windows when handling network communications. A remote attacker can exploit the overflow over a network to execute arbitrary code.

Exploitation requires user interaction and specific conditions, such as particular protocol settings or configurations. The advisory does not specify the required user interaction or exact configuration conditions.

Affected software

How to mitigate CVE-2026-83754

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-83754
• https://support.microsoft.com/help/5126651

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Windows