CVE-2026-83929
HighCVSS 8.8Summary
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
Risk Assessment
The attack can lead to remote code execution, posing a serious threat to system security.
Recommendation
Install the latest Windows updates and restrict network access to vulnerable services.
Other vulnerabilities in Windows GDI
See all- CVE-2026-83934High
Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
- CVE-2026-83860High
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
- CVE-2026-35421High
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.
- CVE-2026-50380Critical
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
- CVE-2025-53766Critical
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
- CVE-2020-1179Medium
An information disclosure vulnerability in Windows GDI component that improperly discloses memory contents. An attacker could obtain information to further compromise the user's system.
- CVE-2020-0963Medium
An information disclosure vulnerability in Windows GDI component that improperly discloses memory contents. An attacker could obtain information to further compromise the user's system.
- CVE-2019-0903HighActively exploited
A remote code execution vulnerability in the Windows GDI+ interface, caused by improper handling of objects in memory. An attacker could exploit this to execute arbitrary code remotely.
- CVE-2026-77491Medium
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
- CVE-2026-69288Medium
A vulnerability in Windows GDI+ involves the use of an uninitialized resource, allowing an authorized attacker to disclose information locally.
Original NVD description (English source)
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS