Windows GDI+ EUVD-2026-56632

Apply the vendor-released patch via Windows Update, WSUS, or Microsoft Update Catalog as documented in the Microsoft MSRC advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62709. Target patched build numbers per EUVD data are: Windows Server 2025 to 10.0.26100.33296 or later, Windows Server 2022 to 10.0.20348.5499 or later, Windows Server 2019 to 10.0.17763.9115 or later, Windows Server 2016 to 10.0.14393.9418 or later, Windows Server 2012 R2 to 6.3.9600.23337 or later, Windows Server 2012 to 6.2.9200.26279 or later, Windows 11 26H1 to 10.0.28000.2704 or later, Windows 11 25H2 to 10.0.26200.9168 or later, Windows 11 24H2 to 10.0.26100.9168 or later, Windows 11 23H2 to 10.0.22631.7517 or later, Windows 10 22H2/21H2 to 10.0.19045.7663 or 10.0.19044.7663 or later, and Windows 10 1607/1809 to 10.0.14393.9418 or 10.0.17763.9115 or later. Note that Windows Server 2012 and 2012 R2 are in extended support phases and require active Extended Security Update (ESU) enrollment to receive this patch; organizations without ESU coverage should prioritize isolation of these systems and restrict local user login rights as a compensating control. Where immediate patching is not possible, restrict RDP and terminal services access to named accounts only and audit local group memberships to remove unnecessary standard user accounts from sensitive servers - this directly reduces the pool of potential attackers able to reach the vulnerable code path.