CVE-2026-83523
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
Risk Assessment
Remote unauthenticated attack could lead to system takeover and lateral movement.
Recommendation
Install available security patches for Windows Image Acquisition.
Other vulnerabilities in Windows Image Acquisition
See all- CVE-2026-85930High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-85842High
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-69613High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-69500High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-69341High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-50315High
The Windows Image Acquisition component contains a null pointer dereference vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2023-35342High
A vulnerability in Windows Image Acquisition allows for elevation of privilege, potentially leading to unauthorized access to the system.
Original NVD description (English source)
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS