CVE-2026-73017
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
Risk Assessment
An attacker with local access may execute arbitrary code in the kernel, potentially leading to full system compromise and takeover.
Recommendation
Apply vendor security patches and restrict access to graphics functions to trusted users only.
Other vulnerabilities in Windows Graphics Kernel
See all- CVE-2026-62774High
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-62702Medium
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to cause denial of service over a network.
- CVE-2026-61346High
A use-after-free vulnerability in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-50493High
Use-after-free vulnerability in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS