Is it exploited? Not on CISA's list. CISA has not added it to the Known Exploited Vulnerabilities catalog as of 29 Oct 2026 . If CISA adds it, this page shows it as known exploited.
How likely is exploitation in the next 30 days? 1% EPSS score, percentile 62 of all scored records. A probability estimated by FIRST, not a report of exploitation.
How severe? 9.8 Critical CVSS v3.1 base score, given by the CNA
Which versions are affected? Affected
from 10.0.14393.0 to before 10.0.14393.9512 from 10.0.17763.0 to before 10.0.17763.9245 from 10.0.19044.0 to before 10.0.19044.7725 from 10.0.19045.0 to before 10.0.19045.7725 from 10.0.22631.0 to before 10.0.22631.7582 from 10.0.22631.0 to before 10.0.22631.7582 and 14 more in the table below
Versions by product
Source: CISA KEV 2026.10.29, as of 29 Oct 2026 ; FIRST EPSS, as of 29 Oct 2026 ; CVE List, as of 29 Oct 2026 . About the data .
What to do Advisories and patches This summary is based on the CVE record as of 29 Oct 2026 . Check the vendor's advisory before you act: affected versions and fixes can change.
Affected products and versions As listed in the CVE record.
Microsoft Windows 10 Version 1607 Status Versions Affected from 10.0.14393.0 to before 10.0.14393.9512
Microsoft Windows 10 Version 1809 Status Versions Affected from 10.0.17763.0 to before 10.0.17763.9245
Microsoft Windows 10 Version 21H2 Status Versions Affected from 10.0.19044.0 to before 10.0.19044.7725
Microsoft Windows 10 Version 22H2 Status Versions Affected from 10.0.19045.0 to before 10.0.19045.7725
Microsoft Windows 11 version 23H2 Status Versions Affected from 10.0.22631.0 to before 10.0.22631.7582
Microsoft Windows 11 Version 23H2 Status Versions Affected from 10.0.22631.0 to before 10.0.22631.7582
Microsoft Windows 11 Version 24H2 Status Versions Affected from 10.0.26100.0 to before 10.0.26100.9445
Microsoft Windows 11 Version 25H2 Status Versions Affected from 10.0.26200.0 to before 10.0.26200.9445
Microsoft Windows 11 version 26H1 Status Versions Affected from 10.0.28000.0 to before 10.0.28000.2954
Microsoft Windows Server 2012 Status Versions Affected from 6.2.9200.0 to before 6.2.9200.26349
Microsoft Windows Server 2012 (Server Core installation) Status Versions Affected from 6.2.9200.0 to before 6.2.9200.26349
Microsoft Windows Server 2012 R2 Status Versions Affected from 6.3.9600.0 to before 6.3.9600.23398
Microsoft Windows Server 2012 R2 (Server Core installation) Status Versions Affected from 6.3.9600.0 to before 6.3.9600.23398
Microsoft Windows Server 2016 Status Versions Affected from 10.0.14393.0 to before 10.0.14393.9512
Microsoft Windows Server 2016 (Server Core installation) Status Versions Affected from 10.0.14393.0 to before 10.0.14393.9512
Microsoft Windows Server 2019 Status Versions Affected from 10.0.17763.0 to before 10.0.17763.9245
Microsoft Windows Server 2019 (Server Core installation) Status Versions Affected from 10.0.17763.0 to before 10.0.17763.9245
Microsoft Windows Server 2022 Status Versions Affected from 10.0.20348.0 to before 10.0.20348.5622
Microsoft Windows Server 2025 Status Versions Affected from 10.0.26100.0 to before 10.0.26100.33438
Microsoft Windows Server 2025 (Server Core installation) Status Versions Affected from 10.0.26100.0 to before 10.0.26100.33438
Source: CVE List, as of 29 Oct 2026 . About the data .
About this vulnerability Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
Summary: CVE record, as of 29 Oct 2026 .
CISA has not added CVE-2026-69819 to its Known Exploited Vulnerabilities (KEV) catalog, as of 29 Oct 2026. The CVE record was published on 8 Sep 2026. The CVE record carries a CVSS v3.1 base score of 9.8 (Critical), given by its CNA. FIRST's EPSS model puts the probability of exploitation in the next 30 days at 1% (percentile 62), as of 29 Oct 2026. EPSS is a statistical estimate, not a report of exploitation. CISA's SSVC assessment in the CVE record: exploitation none, automatable yes, technical impact total. Source: CISA KEV 2026.10.29, as of 29 Oct 2026 ; CVE List, as of 29 Oct 2026 ; FIRST EPSS, as of 29 Oct 2026 . About the data .
Description RPC Runtime Library Remote Code Execution Vulnerability
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
Source: CVE List, as of 29 Oct 2026 . About the data .
Weakness CWE-787 CWE and CAPEC are maintained by MITRE; the entries are those named in the CVE record.
Timeline Date Event 8 Sep 2026 CVE record published 14 Oct 2026 CVE record last updated
Known exploited Microsoft vulnerabilities CVE-2026-96951 : Microsoft Windows Command Injection Vulnerability (added 13 Oct 2026 ) CVE-2026-65660 : Microsoft SharePoint Code Injection Vulnerability (added 25 Sep 2026 ) CVE-2026-81963 : Microsoft Windows Link Following Vulnerability (added 8 Sep 2026 ) CVE-2026-85880 : Microsoft Windows Heap-Based Buffer Overflow Vulnerability (added 8 Sep 2026 ) CVE-2019-1068 : Microsoft SQL Server Remote Code Execution Vulnerability (added 26 Aug 2026 )