CVE-2026-70123

The Microsoft Graphics Component in Windows has a vulnerability that allows for elevation of privilege through improper handling of objects in memory. This affects multiple versions of Windows, including Windows Server 2008 and 2016, as well as Windows 7, 8.1, and 10.

The Microsoft Graphics Component in Windows allows remote code execution due to improper handling of specially crafted embedded fonts. This affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016.

The Microsoft Graphics Component in Windows allows remote code execution due to improper handling of specially crafted embedded fonts. This affects multiple versions of Windows, including Windows Server 2008, Windows 7, Windows 8.1, Windows 10, and Windows Server 2016.

In Microsoft Windows systems, including Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows 10, and Windows Server 2016, there is a vulnerability that allows elevation of privilege due to improper handling of objects in memory by the graphics component.

An elevation of privilege vulnerability exists in Windows 7, 8.1, RT 8.1, 10, and Windows Server 2008 R2, 2012, 2012 R2, and 2016 due to improper handling of objects in memory by the Microsoft Graphics Component.

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally. The flaw may lead to leakage of data from process memory.