Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally.

The remote Windows host is missing security update 5078883. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.
    (CVE-2026-23667)

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
    (CVE-2026-24285)     
  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2026-25177, CVE-2026-25188)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5079466. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.
    (CVE-2026-23667)

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges     locally. (CVE-2026-24283)     
  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2026-25177, CVE-2026-25188)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5078885. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.
    (CVE-2026-23667)

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
    (CVE-2026-24285)         
  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2026-25177, CVE-2026-25188)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5078752. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.
    (CVE-2026-23667)

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
    (CVE-2026-24285)     
  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.
    (CVE-2026-26111)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5079473 or hotpatch 5079420. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.
    (CVE-2026-23667)

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges     locally. (CVE-2026-24283)   
  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2026-25177, CVE-2026-25188)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5078938. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
    (CVE-2026-24285)

  - Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure     (ATBroker.exe) allows an authorized attacker to elevate privileges locally. (CVE-2026-24291)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.
    (CVE-2026-26111)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
301776	KB5078883: Windows 11 version 23H2 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high
301773	KB5079466: Windows 11 Version 26H1 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high
301772	KB5078885: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high
301771	KB5078752: Windows 10 version 1809 / Windows Server 2019 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high
301768	KB5079473: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high
301765	KB5078938: Windows 10 Version 1607 / Windows Server 2016 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2026-24282

medium

Tenable Plugins

high

high

high

high

high

high