CVE Catalog
CVE-2026-62709
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.39%
32th percentile - higher than 32% of all known CVEs
Summary
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
Risk Assessment
An authorized user could access data that should not be visible, potentially compromising information confidentiality on the system.
Recommendation
Install the latest Windows security updates for Windows GDI+.
Original NVD description (English source)
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.