Intel

CVE-2026-54982

microsoft windows_10_1607: Integer Underflow (Wrap or Wraparound)

highEPSS 0.5%

Affected

  • microsoft/windows_10_1607 lt *..10.0.14393.9339
  • microsoft/windows_10_1607 lt *..10.0.14393.9339
  • microsoft/windows_10_1809 lt *..10.0.17763.9020
  • microsoft/windows_10_1809 lt *..10.0.17763.9020
  • microsoft/windows_10_21h2 lt *..10.0.19044.7548
  • microsoft/windows_10_21h2 lt *..10.0.19044.7548
  • microsoft/windows_10_21h2 lt *..10.0.19044.7548
  • microsoft/windows_10_22h2 lt *..10.0.19045.7548
  • microsoft/windows_10_22h2 lt *..10.0.19045.7548
  • microsoft/windows_10_22h2 lt *..10.0.19045.7548
  • microsoft/windows_11_24h2 lt *..10.0.26100.8875
  • microsoft/windows_11_24h2 lt *..10.0.26100.8875
  • microsoft/windows_11_25h2 lt *..10.0.26200.8875
  • microsoft/windows_11_25h2 lt *..10.0.26200.8875
  • microsoft/windows_11_26h1 lt *..10.0.28000.2525
  • microsoft/windows_11_26h1 lt *..10.0.28000.2525
  • microsoft/windows_server_2016 lt *..10.0.14393.9339
  • microsoft/windows_server_2019 lt *..10.0.17763.9020
  • microsoft/windows_server_2022 lt *..10.0.20348.5386
  • microsoft/windows_server_2025 lt *..10.0.26100.33158

Description

Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

Source: cvelistv5NVD (NIST)CVE.org (MITRE)Microsoft Security Update GuideBSI WID PortalBSI CSAF

Affected operating systems

  • windows

    microsoft / windows_10_1607

  • windows

    microsoft / windows_10_1809

  • windows

    microsoft / windows_10_21h2

  • windows

    microsoft / windows_10_22h2

  • windows

    microsoft / windows_11_24h2

  • windows

    microsoft / windows_11_25h2

  • windows

    microsoft / windows_11_26h1

  • windows

    microsoft / windows_server_2012r2

  • windows

    microsoft / windows_server_2012

  • windows

    microsoft / windows_server_2016

  • windows

    microsoft / windows_server_2019

  • windows

    microsoft / windows_server_2022

  • windows

    microsoft / windows_server_2025

Metrics

XIEM Effective CVSS
8.8
Source: nvd-v3
EPSS percentile
43.4 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
KEV status
—
Show all metrics
Severity
high
Priority score
81.26
Exploit maturity
no public PoC known
CVSS v3
8.8
EPSS score
0.5 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-07-14 17:17 UTC
CWE
CWE-191

Weakness classes (CWE)

  • CWE-191Base

    Integer Underflow (Wrap or Wraparound)

    The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

    cwe.mitre.org →

References & sources

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

  1. Initial Analysis2026-07-20 13:37 UTC· nvd@nist.gov
    • CPE Configuration: OR *cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.14393.9339 *cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:* versions up to (excluding) 10.0.14393.9339 *cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.17763.9020 *cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:* versions up to (excluding) 10.0.17763.9020 *cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.14393.9339 *cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.17763.9020 *cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.20348.5386 *cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* versions up to (excluding) 10.0.26100.33158 *cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:* versions up to (excluding) 10.0.28000.2525 *cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.28000.2525 *cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:* versions up to (excluding) 10.0.26100.8875 *cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.26100.8875 *cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:* versions up to (excluding) 10.0.19044.7548 *cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.19044.7548 *cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:* versions up to (excluding) 10.0.19044.7548 *cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:* versions up to (excluding) 10.0.19045.7548 *cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.19045.7548 *cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:* versions up to (excluding) 10.0.19045.7548 *cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:* versions up to (excluding) 10.0.26200.8875 *cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:* versions up to (excluding) 10.0.26200.8875
    • Reference Type: Microsoft Corporation: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54982 Types: Patch, Vendor Advisory

Linked advisories