EUVD-2026-73213
GHSA-98r2-xhc7-f9c3
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
UxTheme parses theme resources typically loaded by a victim, so UI:R and AC:H (heap grooming) are more defensible than the vendor's UI:N/AC:L, while unauthenticated RCE keeps PR:N and full C/I/A impact.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
AnalysisAI
Remote code execution in the Microsoft UxTheme Library (uxtheme.dll) across a broad range of Windows client and server releases stems from an integer underflow that leads to a heap-based buffer overflow. Microsoft rates it CVSS 9.8 with a network vector and no user interaction, meaning an attacker could achieve full compromise (confidentiality, integrity, and availability) if the vulnerable code path is reachable. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires reaching uxtheme.dll's vulnerable size-computation path, which processes theme/visual-style resources; the input that triggers the integer underflow must be attacker-controlled theme data that is parsed by the library. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, 9.8) describes an unauthenticated, zero-click, network-reachable RCE - the highest-priority profile - and the fix ships in a Microsoft security update. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update that contains the fixed uxtheme.dll build for your specific Windows release - Patch available per vendor advisory, with the fixed versions being at or above the EUVD-listed thresholds (e.g. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows client and server systems across your organization and prioritize identification of exposed infrastructure. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today