CVE-2026-70157

Summary

A heap-based buffer overflow in Windows System Information Console allows remote attackers to execute arbitrary code with high privileges. This vulnerability could enable attackers to gain full system control without authentication.

Exploitability

Exploitation is likely straightforward requiring only network access to trigger the vulnerable console functionality, with minimal preconditions needed for successful code execution.

Blast radius

If exploited, this vulnerability could allow widespread system compromise across Windows environments that use the affected console functionality, potentially affecting hundreds or thousands of systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the Microsoft Windows update KB5042817 immediately to patch this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.