Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

The vulnerability of the Windows GDI+ interface on Windows operating systems allows attackers to execute arbitrary code.

🗓️ 12 Aug 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Integer overflow in Windows GDI+ on Windows allows remote arbitrary code execution via crafted file.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2026-62822
11 Aug 202619:00
–circl
cve
CVE		CVE-2026-62822
11 Aug 202617:06
–cve
cvelist
Cvelist		CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability
11 Aug 202617:06
–cvelist
euvd
EUVD		EUVD-2026-56677
11 Aug 202617:06
–euvd
mskb
Microsoft KB		August 11, 2026—Hotpatch KB5120229 (OS Build 20348.5440)
11 Aug 202614:00
–mskb
mskb
Microsoft KB		August 11, 2026—KB5120238 (OS Build 17763.9121)
11 Aug 202614:00
–mskb
mskb
Microsoft KB		August 11, 2026—KB5120242 (OS Build 20348.5499)
11 Aug 202614:00
–mskb
mskb
Microsoft KB		August 11, 2026—KB5120249 (OS Builds 19045.7663 and 19044.7663)
11 Aug 202614:00
–mskb
mskb
Microsoft KB		August 11, 2026—KB5120385 (Monthly Rollup)
11 Aug 202614:00
–mskb
mskb
Microsoft KB		August 11, 2026—KB5120386 (Monthly Rollup)
11 Aug 202614:00
–mskb
Rows per page
Vulners
Node
OR
microsoftwindows_server_2019Range<10.0.17763.9115
microsoftwindows_10_1809Range<10.0.17763.9115
microsoftwindows_11_23h2Range<10.0.22631.7517
microsoftwindows_11_25h2Range<10.0.26200.9168
microsoftwindows_11_25h2Range<10.0.26100.9106
microsoftwindows_server_2025_(server_core_installation)Range<10.0.26100.33296
microsoftwindows_server_2025_(server_core_installation)Range<10.0.26100.33222
microsoftwindows_10_22h2Range<10.0.19045.7663
microsoftwindows_10_21h2Range<10.0.19044.7663
microsoftwindows_server_2022_(server_core_installation)Range<10.0.20348.5499
microsoftwindows_server_2022_(server_core_installation)Range<10.0.20348.5440
microsoftwindows_server_2022Range<10.0.20348.5499
microsoftwindows_server_2022Range<10.0.20348.5440
microsoftwindows_server_2019_(server_core_installation)Range<10.0.17763.9115
microsoftwindows_11_24h2Range<10.0.26100.9168
microsoftwindows_11_24h2Range<10.0.26100.9106
microsoftwindows_11_24h2Range<10.0.26000.9106
microsoftwindows_server_2012_(server_core_installation)Range<6.2.9200.26280
microsoftwindows_server_2012Range<6.2.9200.26280
microsoftwindows_server_2016_(server_core_installation)Range<10.0.14393.9418
microsoftwindows_server_2016Range<10.0.14393.9418
microsoftwindows_10_1607Range<10.0.14393.9418
microsoftwindows_11_26h1Range<10.0.28000.2704
microsoftwindows_server_2025Range<10.0.26100.33296
microsoftwindows_server_2025Range<10.0.26100.33222
microsoftwindows_server_2012_r2_(server_core_installation)Range<6.3.9600.23338
microsoftwindows_server_2012_r2Range<6.3.9600.23338

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
12 Aug 2026 00:00Current
5.9Medium risk
Vulners AI Score5.9
CVSS 38.8
CVSS 210
EPSS0.00633
Windows GDI+integer overflowarbitrary code executionremote attackcrafted file
2