SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-50380

CRITICAL · CVSS 9.6 EPSS 0.63%

Source: NVD + CISA KEV + EPSS · Published 2026-07-14 · Last synced 2026-08-13

CyberRota Analysis

AI-Generated

A critical heap-based buffer overflow vulnerability in Windows GDI+ allows unauthorized attackers to execute arbitrary code remotely, potentially compromising affected systems. Organizations using Windows should prioritize patching this vulnerability to mitigate the risk of exploitation, especially those with exposed network services. Immediate action is recommended to safeguard against potential attacks.

CVE
CVE-2026-50380
Severity
CRITICAL
CVSS
9.6
EPSS
0.63%
Windows

Original NVD Description

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-87654 CRITICAL CVE-2026-87653 MEDIUM CVE-2026-87648 HIGH CVE-2026-87644 HIGH CVE-2026-87621 CRITICAL CVE-2026-87618 HIGH