CVE-2026-72986
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthorized attacker could remotely execute code in the context of the font-processing application, potentially leading to system compromise.
Recommendation
Install security patches for the Graphic Fonts component and restrict processing of untrusted fonts.
Other vulnerabilities in Graphic Fonts
See all- CVE-2026-69326High
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
- CVE-2026-73018High
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
- CVE-2026-69576High
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS