HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-34343 — Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem all...

·Source: NIST NVD

Updated:

Executive Summary

Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally.

Analysis

Heap-based buffer overflow in Windows Application Identity (AppID) Subsystem allows an authorized attacker to elevate privileges locally. CVSS Score: 7.8. Published: 2026-05-12T18:17:08.820.

Indicators of Compromise (1)

CVE (1)
CVE-2026-34343
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on May 12, 2026. Verified by: NIST.

Related Threats

CRITICALAi

Patch Tuesday - May 2026

Microsoft is publishing 137 vulnerabilities on May 2026 Patch Tuesday . Microsoft is not aware of exploitation in the wild or public disclosure for any of these vulnerabilities. So far this month, Microsoft has provided patches to address 133 browser vulnerabilities, which are not included in the Patch Tuesday count above. Windows Netlogon: critical RCE Anyone responsible for securing a domain con

CVE-2026-41089CVE-2020-1472
Rapid7
LOWVulnerabilityNEW

CIOs and HR Leaders Must Redesign Work for AI

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/cios-hr-leaders-must-redesign-work-for-ai-image_small-4-a-33254.jpg" align=right hspace=4><b>Survey: Organizations Must Clarify Accountability as Leadership Roles Shift</b><br>AI is changing how work is divided and decisions are made, while many organizations still haven't clarified who owns AI-related choices and outcomes. CIOs c

Bank Info Security
CRITICALVulnerability

Critical UEFI Flaw Exposes Systems to Pre-Boot Attacks

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/critical-uefi-flaw-exposes-systems-to-pre-boot-attacks-image_small-3-a-33252.jpg" align=right hspace=4><b>Attackers Can Exploit ICMP Error Handling Before Operating System Protections Load</b><br>A critical buffer overflow in TianoCore's EDK II UEFI firmware, tracked as CVE-2026-97631, could let unauthenticated attackers execute c

CVE-2026-97631
Bank Info Security