CVE-2026-78459 | Microsoft Windows up to Server 2025 Internet Information Services heap-based overflow

October 14, 2026 Yanac

A vulnerability classified as very critical has been found in Microsoft Windows. Affected by this issue is some unknown functionality of the component Internet Information Services. This manipulation causes heap-based buffer overflow.

This vulnerability is tracked as CVE-2026-78459. The attack is restricted to local execution. No exploit exists.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More