EUVD-2026-73252
GHSA-mc59-725f-mvqm
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Network delivery of malicious image, no attacker privileges needed, user must interact; heap overflow yields full C/I/A:H on victim process.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
AnalysisAI
Heap-based buffer overflow in Windows Imaging Component (WIC) enables network-delivered code execution on any Windows system where a user opens a crafted image file. The flaw affects an extremely broad surface spanning Windows Server 2012 through Windows Server 2025 and Windows 11 26H1, making it relevant to virtually every Windows-based enterprise environment. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | User interaction is required: a victim must open, preview, or browse to a directory containing a crafted image file, causing Windows Imaging Component to parse the malicious content. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 score and AV:N/AC:L/PR:N/UI:R/C:H/I:H/A:H vector accurately reflect a high-severity, widely exploitable condition - the primary limiting factor is UI:R (user must open or preview a crafted image), which reduces automatable mass exploitation compared to a wormable PR:N/UI:N flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply Microsoft's cumulative updates for each affected Windows version to reach the patched build numbers listed above (e.g., Windows 10 22H2 to 10.0.19045.7725, Windows 11 24H2 to 10.0.26100.9445, Windows Server 2025 to 10.0.26100.33438 - consult the full list at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77495). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit your inventory of Windows Server 2012-2025 and Windows 11 26H1 systems and prioritize assets handling external images (email servers, web gateways, design and media workstations) for rapid patching. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today