CVE-2026-92707

CVE Enrichment

CISA KEV: Not listed

Last enrichment sync: 14-Oct-2026 13:15
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (4)

The second, which Microsoft has not assessed for exploitability, is CVE-2026-92707. Microsoft Fixes Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
to James Forshaw with Google Project Zero, while crediting an anonymous researcher for reporting CVE-2026-92707. The security flaw is the second to be tagged as publicly disclosed. Microsoft Patches 1,413 Vulnerabilities, Including Actively Exploited Windows Shell Flaw
CVE-2026-92707 - MessagePack-CSharp Denial of Service Vulnerability Microsoft October 2026 Updates Fix 1,411 Flaws, Including Three Zero-Days
CVE-2026-92707 is a Moderate publicly disclosed denial of service vulnerability in MessagePack-CSharp and has a CVSS score of 5.3. Microsoft’s October 2026 Patch Tuesday Fixes 1,413 Vulnerabilities, Including an Exploited Zero-Day

CVE (1237)

People (11)

MITRE ATT&CK (2)

Vendors (14)

Products (109)

Tools (1)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.