Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

The vulnerability of the Windows Imaging Component (WIC) framework in Windows operating systems allows a perpetrator to execute arbitrary code.

🗓️ 12 Oct 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Buffer overflows in the Windows Imaging Component (WIC) framework allow arbitrary code execution.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for Heap-based Buffer Overflow in Microsoft
12 Aug 202621:03
–githubexploit
attackerkb
attackerkb		CVE-2026-54984
11 Aug 202617:03
–attackerkb
circl
Circl		CVE-2026-54984
11 Aug 202619:01
–circl
cve
CVE		CVE-2026-54984
11 Aug 202617:03
–cve
cvelist
Cvelist		CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability
11 Aug 202617:03
–cvelist
euvd
EUVD		EUVD-2026-56301
11 Aug 202617:03
–euvd
jvn
Japan Vulnerability Notes		Security information for Hitachi Disk Array Systems
28 Sep 202603:02
–jvn
kitploit
Kitploit		CVE-2026-54984
10 Oct 202607:49
–kitploit
mscve
Microsoft CVE		Windows Imaging Component Remote Code Execution Vulnerability
11 Aug 202614:00
–mscve
ncsc
NCSC		Vulnerabilities in Microsoft Windows
11 Aug 202619:47
–ncsc
Rows per page
Vulners
Node
OR
microsoftwindows_11_23h2Range<10.0.22631.7517
microsoftwindows_11_25h2Range<10.0.26200.9168
microsoftwindows_server_2025_(server_core_installation)Range<10.0.26100.33296
microsoftwindows_server_2025_(server_core_installation)Range<10.0.26100.33222
microsoftwindows_10_22h2Range<10.0.19045.7663
microsoftwindows_10_21h2Range<10.0.19044.7663
microsoftwindows_server_2022_(server_core_installation)Range<10.0.20348.5499
microsoftwindows_server_2022_(server_core_installation)Range<10.0.20348.5440
microsoftwindows_server_2022Range<10.0.20348.5499
microsoftwindows_server_2022Range<10.0.20348.5440
microsoftwindows_11_24h2Range<10.0.26100.9168
microsoftwindows_11_24h2Range<10.0.26100.9106
microsoftwindows_server_2012_(server_core_installation)Range<6.2.9200.26280
microsoftwindows_server_2012Range<6.2.9200.26280
microsoftwindows_server_2016_(server_core_installation)Range<10.0.14393.9418
microsoftwindows_server_2016Range<10.0.14393.9418
microsoftwindows_10_1607Range<10.0.14393.9418
microsoftwindows_11_26h1Range<10.0.28000.2704
microsoftwindows_server_2025Range<10.0.26100.33296
microsoftwindows_server_2025Range<10.0.26100.33222
microsoftwindows_server_2012_r2_(server_core_installation)Range<6.3.9600.23338
microsoftwindows_server_2012_r2Range<6.3.9600.23338
microsoftwindows_11_25h2Range<10.0.26200.9106
microsoftwindows_server_2019_(server_core_installation)Range<10.0.17763.9121
microsoftwindows_server_2019Range<10.0.17763.9121
microsoftwindows_10_1809Range<10.0.17763.9121

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
12 Oct 2026 00:00Current
8.2High risk
Vulners AI Score8.2
CVSS 27.2
CVSS 37.8
EPSS0.00466
Windows Imaging ComponentWindowsbuffer overflowarbitrary code execution
2