CVE Catalog

CVE-2026-61360

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

32th percentile - higher than 32% of all known CVEs

Summary

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

Risk Assessment

Risk of data disclosure by an authenticated local user due to GDI flaw.

Recommendation

Install the security update for Windows GDI.

Original NVD description (English source)

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS