What is the CVSS score of CVE-2026-44812?

CVE-2026-44812 has a contested CVSS base score of 7.8 from a third party (e.g. CISA-ADP), while the vendor rates it High. vuln.today uses the vendor rating as authoritative.

Which versions of Excel are affected by CVE-2026-44812?

A privilege escalation vulnerability in Windows graphics subsystem (CVE-2026-44812, CVSS 7.8) enables attackers with low-privilege local access to execute arbitrary code through crafted graphics…. A patch is available.

How to fix or mitigate CVE-2026-44812?

Within 24 hours: Document Windows system inventory by edition; enable graphics subsystem event logging and endpoint monitoring for privilege escalation attempts. Within 7 days: Deploy application whitelisting via AppLocker (Windows Pro/Enterprise environments) or equivalent third-party solutions; enforce strict user privilege policies; restrict execution of graphics applications from untrusted sources. Within 30 days: Monitor Microsoft Security Update Guide daily for CVE-2026-44812 patch release; prepare and test patch deployment procedures; deploy updates to all Windows systems immediately upon vendor release with verification of installation success.

Excel CVE-2026-44812

EUVD-2026-35759 HIGH

Integer Overflow or Wraparound (CWE-190)

2026-06-09 secure@microsoft.com

GHSA-3xgp-g57j-vc7f

Microsoft Integer Overflow Buffer Overflow Excel Powerpoint Word Windows 10 1607 Windows 10 1809 Windows 10 21h2 Windows 10 22h2 Windows 11 23h2 Windows 11 24h2 Windows 11 25h2 Windows 11 26h1 Windows Server 2012 Windows Server 2016 Windows Server 2019 Windows Server 2022 Windows Server 2025

High

Disputed · 7.8 Vendor: microsoft

Temporal: 6.8

Severity by source

Sources disagree (Medium–Critical)

Vendor (microsoft) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ENISA EUVD

CRITICAL

qualitative

CIRCL (temporal)

6.8 MEDIUM

cvss

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: microsoft

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jun 09, 2026 - 19:03 EUVD

Analysis Generated

Jun 09, 2026 - 18:32 vuln.today

CVE Published

Jun 09, 2026 - 17:17 nvd

HIGH 7.8

DescriptionCVE.org

Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

AnalysisAI

Local code execution in Microsoft Windows Win32K GRFX (graphics) subsystem allows an attacker with low-privilege local access to run arbitrary code by triggering an integer overflow, after coaxing a user into interacting with a crafted graphics object. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV, though Win32K bugs historically attract rapid exploit development for privilege escalation in post-compromise chains.