← Back to search

CVE-2026-83929

8.8 HIGH

Published 2026-10-13 · Updated 2026-10-16

AI risk analysis

Summary
Windows GDI's out-of-bounds write vulnerability allows remote code execution when processing graphics data, potentially enabling attackers to run arbitrary code on affected systems.
Exploitability
Exploitation requires a remote attacker to craft malicious graphics content that triggers the buffer overflow, with minimal preconditions needed for successful exploitation.
Blast radius
The vulnerability affects all Windows systems running GDI services, with high impact as it can lead to full system compromise from remote network-based attacks.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Apply the latest Windows updates including KB5042819 or later patches to address this GDI out-of-bounds write vulnerability.
rcegdiwindowsremote

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.