CVE-2026-100202

A use-after-free flaw (CWE-416) in the Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over the network. The issue is remotely reachable with low attack complexity and requires neither privileges nor user interaction (CVSS 3.1 9.8: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Successful exploitation can fully compromise confidentiality, integrity, and availability of the affected host. Windows systems that have the MSMQ Queue Manager component are in scope; the supplied data does not name specific version ranges. CISA has not added this CVE to the Known Exploited Vulnerabilities catalog, and no public proof-of-concept is known.

What to do: Install the Microsoft security update that addresses CVE-2026-100202 for your Windows builds as soon as it is available. If Message Queuing is not required, remove or disable the MSMQ feature, and block unsolicited network access to MSMQ (notably TCP 1801) from untrusted networks. Check whether the Queue Manager service is installed and which hosts expose it.