CVE Catalog

CVE-2026-77496

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.84%

57th percentile - higher than 57% of all known CVEs

Summary

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Risk Assessment

Risk of arbitrary code execution on the victim's machine after processing a crafted image, potentially leading to system takeover.

Recommendation

Install Windows security updates and avoid opening images from untrusted sources.

Other vulnerabilities in Windows Imaging Component

See all
Original NVD description (English source)

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS