CVE-2026-70296
CriticalCVSS 9.8Summary
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code remotely over a network.
Risk Assessment
An attacker could exploit this to execute malicious code in the user context, potentially leading to system compromise and data theft.
Recommendation
Install security updates for Windows and exercise caution when opening image files from untrusted sources.
Other vulnerabilities in Windows Imaging Component
See all- CVE-2026-83992High
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-77495High
A heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-62740Medium
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
- CVE-2026-54984High
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
Original NVD description (English source)
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.