CVE-2026-77491

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

An information disclosure vulnerability in Windows GDI component that improperly discloses memory contents. An attacker could obtain information to further compromise the user's system.

An information disclosure vulnerability in Windows GDI component that improperly discloses memory contents. An attacker could obtain information to further compromise the user's system.

A vulnerability in Windows GDI+ involves the use of an uninitialized resource, allowing an authorized attacker to disclose information locally.

An integer underflow (wrap or wraparound) exists in Windows GDI+. This allows an authorized attacker to elevate privileges over a network.

An out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.