Windows Imaging Component vulnerabilities
13 known CVE vulnerabilities in Windows Imaging Component, translated and rated.
- CVE-2026-69886Critical
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-70296Critical
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-96859Medium
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. The flaw results from improper processing of image data.
- CVE-2026-77496High
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-83992High
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-77495High
A heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-73023High
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-73013High
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-69860High
A heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-69499High
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- CVE-2026-69318Medium
An out-of-bounds read in the Windows Imaging Component allows an authorized attacker to disclose information locally.
- CVE-2026-62740Medium
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
- CVE-2026-54984High
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

