CVE-2026-62890

A heap-based buffer overflow vulnerability in Windows GDI+ allows an authorized attacker to execute arbitrary code locally, potentially compromising system integrity and confidentiality. Organizations using affected Windows products should prioritize patching this vulnerability to mitigate the risk of exploitation. This is particularly critical for environments where GDI+ is extensively utilized in applications.