CVE Catalog
CVE-2026-50380
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.61%
46th percentile - higher than 46% of all known CVEs
Summary
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute arbitrary code on a Windows system, potentially leading to full system compromise and data theft.
Recommendation
Install the latest Windows security update from Microsoft.
Original NVD description (English source)
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.