Windows Text Shaping Remote Code Execution Vulnerability
This is a record in the CVE List, the public register of security flaws. The title and any summary are in the source's own words.
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
- Kind
- Check with your IT provider
- Started
- Why we can name the supplier
- An official register says it: a CVE record, CISA's list of exploited flaws or the NCSC
Products it names
- Windows Server 2012 / 2012 R2 (Microsoft)
- Windows Server (Microsoft)
The latest
We aim to update this thread. For the latest, check the supplier's own page directly: www.cve.org/CVERecord?id=CVE-2026-97814.
This entry comes from our research build of public sources made on 24 Oct 2026.