CVE Catalog
CVE-2026-62890
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.27%
19th percentile - higher than 19% of all known CVEs
Summary
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
Risk Assessment
An attacker could execute malicious code in the context of the current user, potentially leading to system compromise.
Recommendation
Apply the latest Windows security updates to fix this vulnerability.
Original NVD description (English source)
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.