{"@odata.context":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/$metadata#vulnerability/$entity","id":"00000000-0000-0000-0000-00001f4878c6","releaseDate":"2026-11-10T08:00:00-08:00","cveNumber":"CVE-2026-116928","cveTitle":"Windows Search Remote Code Execution Vulnerability","releaseNumber":"2026-Nov","vulnType":"Security Vulnerability","latestRevisionDate":"2026-11-10T08:00:00-08:00","description":"<p>Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.</p>\n","cweList":["CWE-787: Out-of-bounds Write"],"cweDetailsListForSearch":["cwe: CWE-787: Out-of-bounds Write","cweUrl: https://cwe.mitre.org/data/definitions/787.html"],"unformattedDescription":"<p>Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.</p>","mitreText":"CVE-2026-116928","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116928","publiclyDisclosed":"No","exploited":"No","latestSoftwareReleaseId":2,"latestSoftwareRelease":"Exploitation Less Likely","olderSoftwareReleaseId":0,"denialOfService":"N/A","tag":"Microsoft Windows Search Component","issuingCna":"Microsoft","issuingCnaId":100000001,"severityId":100000000,"severity":"Critical","impactId":100000005,"impact":"Remote Code Execution","langCode":"en-US","baseScore":"9.8","temporalScore":"8.5","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":1,"cweDetailsList":[{"keys":["cwe","cweUrl"],"values":["CWE-787: Out-of-bounds Write","https://cwe.mitre.org/data/definitions/787.html"]}],"articles":[{"articleType":"FAQ","description":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An unauthenticated attacker could exploit the Windows Search component used by Microsoft Exchange Server by sending an email containing a specially crafted attachment. Exchange automatically processes the attachment for indexing, so the recipient does not need to open the email or attachment. Successful exploitation could allow the attacker to execute code with the permissions of the affected processing service.</p>\n","ordinal":10000},{"title":"Microsoft Windows Search Component Remote Code Execution Vulnerability","articleType":"100000000","description":"<p>Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.</p>\n","ordinal":10000},{"title":"Microsoft Exchange Server Remote Code Execution Vulnerability","articleType":"100000000","description":"<p>Out-of-bounds write in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.</p>\n","ordinal":10000}],"revisions":[{"cveNumber":"CVE-2026-116928","version":1,"revisionDate":"2026-11-10T08:00:00-08:00","initialDate":"0001-01-01T00:00:00Z","description":"<p>Information published.</p>\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"1ef41a85-16d2-f111-a059-7ced8d6f06f2"}]}