CVE-2026-77496
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Risk Assessment
Risk of arbitrary code execution on the victim's machine after processing a crafted image, potentially leading to system takeover.
Recommendation
Install Windows security updates and avoid opening images from untrusted sources.
Other vulnerabilities in Windows Imaging Component
See all- CVE-2026-69886Critical
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-70296Critical
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-96859Medium
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. The flaw results from improper processing of image data.
- CVE-2026-83992High
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-77495High
A heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-73023High
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-73013High
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-69860High
A heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-69499High
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-69318Medium
An out-of-bounds read in the Windows Imaging Component allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

