Skip to content

Exploited: 178

LatestCVE-2026-115731 — Report Deserialization Code Execution

8.8

CVE-2026-102225Fix available

Windows Text Shaping Remote Code Execution Vulnerability

Microsoft Windows 10 Version 16072026-10-13 19:01 UTC1 min readRead in

Summary

Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Remediation

Inventory every Microsoft Windows 10 Version 1607 deployment, including staging.
Upgrade Microsoft Windows 10 Version 1607 to the fixed version for your release line, listed under Affected versions.
Confirm the running version after the upgrade.

References

Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102225

Affected versions

Version	Fixed in
10.0.14393.0 – <10.0.14393.9612	10.0.14393.9612
10.0.17763.0 – <10.0.17763.9376	10.0.17763.9376
10.0.19044.0 – <10.0.19044.7807	10.0.19044.7807
10.0.19045.0 – <10.0.19045.7807	10.0.19045.7807
10.0.22631.0 – <10.0.22631.7652	10.0.22631.7652
10.0.26100.0 – <10.0.26100.9711	10.0.26100.9711
10.0.26200.0 – <10.0.26200.9711	10.0.26200.9711
10.0.28000.0 – <10.0.28000.3231	10.0.28000.3231
10.0.26300.0 – <10.0.26300.9711	10.0.26300.9711
6.2.9200.0 – <6.2.9200.26434	6.2.9200.26434
6.3.9600.0 – <6.3.9600.23470	6.3.9600.23470
10.0.20348.0 – <10.0.20348.5761	10.0.20348.5761

Weakness

CWE-125

Exploit probability (EPSS)

0.9%

Timeline

2026-10-13Publicly disclosed

Sources

CVE